Dokar Tsaro da Resilience ta yanar gizo

A ranar 17 ga Yuli, 2024, an sanar da shi a lokacin bude Majalisar Dokoki ta Jiha cewa gwamnatin Labour za ta gabatar da Dokar Tsaron Yanar Gizo da Juriya ta Intanet (CS&R). An tsara dokar ne don sabunta Dokokin Tsaron Yanar Gizo da Bayanai na 2018 da ake da su a yanzu, wanda aka sani da UK NIS. CS&R za ta ƙarfafa kariyar yanar gizo ta Burtaniya da juriya ga hare-haren abokan gaba, ta haka za a tabbatar da cewa kayayyakin more rayuwa da muhimman ayyukan da kamfanonin Burtaniya suka dogara da su an kare su ta hanyar magance raunin da ke tattare da su, yayin da za a tabbatar da cewa tattalin arzikin dijital zai iya samar da ci gaba .

Dokar za ta faɗaɗa ayyukan ƙa'idojin da ake da su da kuma sanya masu kula da harkokin kuɗi a kan turba mai ƙarfi, da kuma ƙara buƙatun bayar da rahoto da aka sanya wa 'yan kasuwa don taimakawa wajen gina kyakkyawan hoto game da barazanar yanar gizo. Manufarta ita ce ƙarfafa kariyar yanar gizo ta Burtaniya, tabbatar da cewa muhimman kayayyakin more rayuwa da ayyukan dijital da kamfanoni ke dogara da su suna da aminci. Dokar za ta faɗaɗa kuma ta yi aiki a faɗin Burtaniya.

Sabbin dokokin suna cikin alƙawarin Gwamnati na inganta da ƙarfafa matakan tsaron yanar gizo na Burtaniya da kuma kare tattalin arzikin dijital. CS&R za ta gabatar da cikakken tsarin dokoki wanda aka tsara don aiwatar da tsauraran matakan tsaro na yanar gizo a sassa daban-daban. Wannan tsarin zai haɗa da bin ƙa'idodi da ayyuka na tsaro na yanar gizo da aka kafa don tabbatar da cewa ana aiwatar da muhimman matakan tsaron yanar gizo. A ƙarshe, 'yan kasuwa za su buƙaci nuna bin waɗannan ƙa'idodi ta hanyar yin bincike da bayar da rahoto akai-akai. Haka kuma an haɗa da hanyoyin dawo da kuɗi don samar da albarkatu ga masu kula da harkokin da kuma samar da iko don bincika yiwuwar rauni.

An yi wa kudirin 'Tsarin Tsaron Intanet da Juriya (Cibiyoyin Sadarwa da Bayanai)' karatu na farko a Majalisar Dokokin Burtaniya a ranar 12 ga Nuwamba, 2025.

Muhimman bayanai

Muhimman bayanai daga Jawabin Sarki sune:

i) The current UK NIS cyber security regulations play an essential role in safeguarding the UK’s critical national infrastructure by placing security duties on industry involved in the delivery of essential services. These regulations cover the five sectors of transport, energy, drinking water, health and digital infrastructure, as well as some digital services including online marketplaces, online search engines, and cloud computing services. 12 regulators are responsible for implementing the present regulations.

ii) Hostile cyber actors are increasingly targeting UK critical sectors and supply chains. Recent serious high-profile attacks impacting London hospitals and the Ministry of Defence, as well as ransomware attacks on the British Library and Royal Mail, have highlighted that UK services and institutions are vulnerable to attack.

iii) The impacts of a cyber attack on these sectors pose severe risks to UK citizens, core services and the economy at large. For example, as a result of the ransomware attack affecting the NHS in England in June [2024], 3,396 outpatient appointments and 1,255 elective procedures were postponed across King's College Hospital, Guy’s Hospital and St Thomas’ Hospital, all in South London. It has been estimated that the cost of cybercrime in the UK in 2023 was $320 billion, near £225 billion.

iv) The National Cyber Security Centre (NCSC) assess that the increased threat from hostile states and state-sponsored actors continues to escalate. At a recent speech at CyberUK, NCSC CEO Felicity Oswald warned that providers of essential services in the UK cannot afford to ignore these threats.

v) 2 UK NIS Post-Implementation Reviews found that the original regulations are having a positive impact, but that progress has not been fast enough. In 2022 the review found that they "are a vital framework in raising wider UK resilience against network and information systems security threats", but updates are required to keep pace with growing threats. Just over half of the operators of essential services have updated or strengthened existing policies and processes since the inception of the UK NIS Regulations in 2018, which were introduced after EU NIS Directive 2016/1148.

Sakamako

Zai gabatar da rahoton 'yan fashin teku na dole domin hukumomi su fahimci barazanar da kyau kuma su "faɗakar da mu game da hare-haren da ka iya tasowa ta hanyar faɗaɗa nau'in da yanayin abubuwan da hukumomin da ke kula da su dole ne su bayar da rahoto." Duk da cewa wannan tattara bayanai zai iya ƙara juriya ga hare-hare, nauyin gudanarwa ga 'yan kasuwa daga wannan rahoton na iya kawo ƙarin kuɗaɗe da kuma kuɗaɗen da aka kashe wajen satar bayanai ta yanar gizo.

Ganin cewa hanyoyin kasuwanci na zamani suna da alaƙa, dole ne ƙungiyoyi su tabbatar da cewa abokan hulɗarsu da masu samar da kayayyaki suma sun bi ƙa'idodin da CS&R ta gindaya.

A cikin Tarayyar Turai, ana sabunta ainihin Umarnin Tsaron Yanar Gizo da Bayanai (NIS Directive 2016/1148) zuwa Umarnin 2022/2555, wanda aka sani da EU NIS 2. EU NIS 2 ta gabatar da sauye-sauye masu yawa ga dokokin tsaron yanar gizo na Tarayyar Turai na yanzu don tsarin sadarwa da bayanai. CS&R ya kamata ta kawo dokokin NIS na Burtaniya na 2018 da ke akwai zuwa tsarin kama da na Tarayyar Turai.

Dokar har yanzu ba ta da wani bayani game da duk wani hukunci na rashin bin doka ko kuma abin da masu kula da bayanai ke buƙata daga wata ƙungiya da ta fuskanci matsalar tsaron yanar gizo. An sanar da hakan a watan Afrilun 2025 ta hannun Peter Kyle, Sakataren Harkokin Waje na Ma'aikatar Kimiyya, Kirkire-kirkire da Fasaha ta Burtaniya, cewa za a ci tarar £100,000 a kowace rana saboda rashin ɗaukar mataki kan barazanar da ta shafi hakan.

Martani

Jon Ellison, Daraktan NCSC na Juriyar Kasa, ya ce kudirin da aka gabatar "lokaci ne mai muhimmanci wajen magance barazanar da ke kara ta'azzara ga tsarin Burtaniya mai mahimmanci". Ya ci gaba da cewa zai zama "mataki mai mahimmanci zuwa ga tsarin dokoki mafi cikakken tsari, wanda ya dace da duniyarmu mai saurin canzawa".

Tsohon shugaban NCSC Ciaran Martin tare da sauran ƙwararru sun yi maraba da shawarar majalisar. A shafukan sada zumunta, ya rubuta cewa dokar da aka gabatar ta yi kama da ta dace, tare da buƙatar bayar da rahoto mai mahimmanci da kuma matakai masu kyau.

Wakilin Kamfen na CyberUp Matt Hull ya ce kungiyar na fatan gwamnati ta sabunta juriyar amfani da yanar gizo a Burtaniya, musamman Dokar Amfani da Kwamfuta ta 1990. Duk wani sabuntawa ga wannan Dokar zai taimaka wa kwararru kan yanar gizo su kare Birtaniya, su kare tattalin arzikin dijital da kuma bude yiwuwar ci gaba a masana'antar tsaron yanar gizo.

Sanarwar manufofin tsaron yanar gizo da juriya

A watan Afrilun 2025, an buga Bayanin Manufar CS&R, wanda ya bayyana matakan da aka tabbatar da kuma waɗanda aka tsara don haɗawa a cikin kudirin. Yana ambato: "Juyin juya halin dijital yana canza Tsarin Kayayyakin more rayuwa na ƙasa (CNI) da muhimman ayyukanmu na jama'a. Yana ba da dama ta musamman - don inganta rayuwar mutanenmu da ƙasarmu. Duk da haka, yana iya kawo sabbin rauni masu haɗari... A cikin wannan Bayanin Manufar, na tsara shawarwarin dokoki don wannan Dokar. Na kuma yarda cewa yanayin yanar gizo yana motsawa sosai - abubuwa da yawa na iya faruwa cikin ɗan gajeren lokaci. Wannan bayanin ya gabatar da ƙarin matakai da yawa don magance barazanar da muke fuskanta yanzu."

Dokar tana da nufin ƙarfafa tsaron yanar gizo na Burtaniya da kuma tabbatar da muhimman ababen more rayuwa da muhimman ayyukan dijital, ta haka ne za a inganta kariyar CNI. Sanarwar ta yi cikakken bayani game da shirin fadada tsarin dokoki don rufe ƙarin hukumomi, ƙarfafa masu kula da harkokin da kuma inganta kulawa. Wannan ya haɗa da haɓaka rahotannin abubuwan da suka faru, ƙara ƙarfin tattara bayanai na ICO da inganta hanyoyin dawo da farashi na masu kula da harkokin. Dokar ta kuma magance buƙatar tsarin dokoki mai daidaitawa don ci gaba da tafiya daidai da yanayin yanar gizo mai ci gaba.

CS&R na neman faɗaɗa iyakokin ƙungiyoyin da ake buƙata don inganta kimanta haɗarinsu, ƙarfafa matakan tsaro na tsaro na yanar gizo ga ƙungiyoyi kusan 1000. Waɗannan matakan za su ƙara kariyar bayanai da tsaron hanyar sadarwa kuma wataƙila za su haɗa da masu gudanar da cibiyar bayanai da masu samar da sabis da ake gudanarwa . Shawarwarin sun kuma haɗa da ba wa masu kula da ƙa'idoji ƙarin kayan aiki don haɓaka ƙa'idodin tsaro, tilasta wa gwamnati bayar da rahotannin abubuwan da suka faru dalla-dalla da kuma ba wa gwamnati ikon sabunta tsarin dokoki yayin da barazana da fasaha ke tasowa.

Sanarwar ta ba da cikakken bayani game da canje-canjen da aka yi wa shirin Cyber Essentials, gami da sabuntawa ga ma'anar software, gyaran raunin da kuma kalmomin da suka shafi aiki daga nesa. Za a sabunta ƙayyadaddun gwajin Cyber Essentials Plus tare da sabbin alamun tabbatarwa, tabbatar da rarrabuwa ta hanyar ƙaramin saiti da kuma tabbatar da samfur. Sanarwar ta kuma bayyana matakan da ƙungiyoyi za su buƙaci ɗauka don cimma takardar shaidar Cyber Essentials a 2025 da kuma gaba. Waɗannan sun haɗa da canje-canje ga buƙatun kayayyakin more rayuwa na IT, kamar gabatar da tantancewa mara kalmar sirri .

Jadawalin Jadawalin

Kudurin zai ci gaba da matakai bakwai na tsarin dokoki wanda zai gudana a majalisun biyu na Burtaniya: karatu na farko, karatu na biyu, matakin kwamiti, matakin rahoto, karatu na uku, majalisar da ke adawa da ita da kuma amincewar sarki.

1. 17 ga Yuli 2024 - An sanar da kudirin dokar.
2. 1 ga Afrilu 2025 - Sanarwar manufofin tsaron yanar gizo da juriya.
3. 12 Nuwamba 2025 - Karatu na farko: An gabatar da kudirin ga Majalisar Dokoki (na yanzu).

Duba kuma

• Dokar Juriyar Yanar Gizo - Dokokin EU don inganta tsaron yanar gizo da juriyar yanar gizo.
• GDPR - Dokar Kare Bayanai ta Gabaɗaya.
• Malware - Misalan sun haɗa da ƙwayoyin cuta na kwamfuta, kayan leƙen asiri da kuma adware .

Hanyoyin haɗi na waje

• Sanarwar manufofin tsaron yanar gizo da juriya Afrilu 2025
• Takaitaccen Bayani Kan Tsaron Yanar Gizo a Burtaniya - Laburaren Majalisa