Police and fire services across England and Wales are facing elevated risks of cyber attacks due to a reliance on outdated legacy systems and persistent human error.
A report from His Majesty’s Inspectorate of Constabulary and Fire & Rescue Services said while minor progress has occurred over the last six years, current defenses remain insufficient. The inspectorate highlighted that legacy infrastructure is the primary strategic vulnerability.
Furthermore, the reliance on third-party information and communications technology suppliers creates significant exposure, particularly regarding sensitive data related to intelligence and ongoing investigations. Internal security practices also remain a concern, with reports of poor password management, inadequate multi-factor authentication and insufficient training for staff transitions. Inspectors described current backup and restoration capabilities as unsatisfactory, leaving services vulnerable to prolonged disruption.
Leadership engagement is identified as a critical failure, as many senior officials do not treat cybersecurity as a core operational priority. To address these gaps, the inspectorate recommends establishing baseline cybersecurity standards, enhancing third-party contract oversight and improving national coordination. These findings follow recent security warnings issued to the Metropolitan Police Service and a disruptive incident affecting the Dyfed-Powys Police, underscoring the urgent need for systemic improvements to protect public safety and sensitive data.
Source: IT Pro
Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.
Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.
An error occurred trying to play the stream. Please reload the page and try again.
CloseRegistering with SC Media is 100% free. Join tens of thousands of cybersecurity leaders today and gain access to the latest analysis shaping the global infosec agenda.
