Key Takeaways:
- A new law has been approved by the States to increase Jersey’s protection against cyber attacks
- The law requires Operators of Essential Services (OES) to improve their levels of cyber security
- The Jersey Cyber Security Centre (JCSC) will be given legal status and will help organisations make the necessary changes
- OES will be required to register with the JCSC, make improvements, and report significant cyber incidents within 24 hours
- The law aims to improve the cyber resilience of key services and clarify the role of the JCSC
Introduction to the New Law
The passing of the Cyber Security (Jersey) Law is a significant milestone for the island of Jersey, marking a major step forward in its efforts to protect against cyber attacks. The law, which has been approved by the States, aims to increase the island’s protection against cyber threats by requiring organisations that provide essential services to improve their levels of cyber security. These organisations, known as Operators of Essential Services (OES), will be expected to register with the Jersey Cyber Security Centre (JCSC) and make the necessary improvements to their cyber security systems.
The Role of the Jersey Cyber Security Centre
The JCSC, which is an arm’s length advisory and emergency response group, will play a crucial role in helping organisations make the necessary changes before the law comes into force. The centre will provide guidance and support to OES, helping them to improve their cyber resilience and reduce the risk of cyber attacks. The JCSC will also be given legal status, which will enable it to collaborate with OES in a constructive and confidential way. According to Matt Palmer, director of JCSC, the approval of the law is a significant landmark for the island, and will make it easier for the centre to work with OES to improve their cyber security.
The Impact on Operators of Essential Services
The new law will have a significant impact on organisations that provide essential services, including those in the energy, water, transport, food production and retail, postal and courier services, health, telecommunications, public communications, financial services, and public administration sectors. These organisations will be required to register with the JCSC and make improvements to their cyber security systems. They will also be expected to report any significant cyber incidents to the JCSC within 24 hours of becoming aware of them. This will enable the centre to respond quickly and effectively to cyber attacks, and to provide support to affected organisations.
The Benefits of the New Law
The new law is expected to have a number of benefits for Jersey, including improved cyber resilience, reduced risk of cyber attacks, and increased confidence in the island’s ability to protect against cyber threats. The law will also help to clarify the role of the JCSC and enable it to work more effectively with OES. According to Matt Palmer, the approval of the law is a significant landmark for the island, and will make it easier for the JCSC to collaborate with OES in a constructive and confidential way. The law is also expected to have a positive impact on the island’s economy, by providing a safer and more secure environment for businesses to operate.
Conclusion
In conclusion, the passing of the Cyber Security (Jersey) Law is a significant milestone for the island of Jersey, marking a major step forward in its efforts to protect against cyber attacks. The law requires OES to improve their levels of cyber security, and gives the JCSC legal status and a clearer role. The law is expected to have a number of benefits, including improved cyber resilience, reduced risk of cyber attacks, and increased confidence in the island’s ability to protect against cyber threats. As the law comes into force, it is likely to have a significant impact on organisations that provide essential services, and will help to make Jersey a safer and more secure place to live and do business.
