Suggestions
Ian Thomas
Sapphire Cyber Defence
Ian Thomas is the Chief Executive Officer of Sapphire, a UK-based cyber security solutions provider, having assumed the role in September 2023. With over 25 years of experience in the Cyber Security, IT Services, and Consulting sectors, Thomas has a strong background in leading large teams and managing significant transformations within organizations. His previous roles include leadership positions at British Airways, Cable & Wireless, NCC Group, Sopra Steria, Colt Technology Services, and Hewlett Packard Enterprise.124
At Sapphire, Thomas is focused on driving growth and enhancing the company's service offerings, particularly in the realm of operational technology (OT) security. Under his leadership, Sapphire recently acquired Awen Collective, which specializes in cyber security for OT environments, marking a strategic expansion for the company.34 Thomas emphasizes the importance of being a true partner to clients in navigating the complexities of cyber security, aiming to support organizations in making informed decisions rather than reacting out of fear.4
In addition to his professional achievements, Ian Thomas is known to be a keen rugby fan, frequently attending matches at Murrayfield and Twickenham.1
Highlights
Cyber Security and Resilience Bill - Is It Enough? We know that cyber attacks continue to rise, that it’s not just retailers and banks who are being target but the fabric of society, our hospitals our universities, our defences which are targeted by cyber crime and nation states. So the announcement in the Kings Speech today of a Bill to “…strengthen the UK’s cyber defences, ensure that critical infrastructure and the digital services that companies rely on are secure” is very welcome news.
Expanded powers for regulators, increased focus on supply chains, proactive investigation of vulnerabilities, mandating incident reporting; these are all positive steps forward.
I was initially buoyed by the announcement, government legislating to tackle the threat head on and in the first Kings Speech signalling the priority. True signs that we’re taking the protection of British business, infrastructure, government and society seriously.
Then I wondered, is updating existing laws and mandating reporting enough? The release from the Prime Ministers Office states “This Bill will fill an immediate gap in our defences and prevent similar attacks experienced by critical public services in the UK…”, well it’ll need more than some updated wording and an insistence on reporting to achieve that.
The cost to the UK economy in 2011 from Cyber attacks was £27Bn, the fact that that estimate is 13 years out of date tells you a lot. The cost today is likely many times that figure. At a recent speech at CyberUK, National Cyber Security Centre CEO Felicity Oswald warned that providers of essential services in the UK cannot afford to ignore these threats. So where’s the increased funding for the NCSC to support our infrastructure providers as they strive to protect the nation?
The Cyber Essentials programme, created and championed by the NCSC reduces the likelihood of attack by 90% (amazing) yet less than 3% of British businesses hold a current certification.
This Bill is great news, and it’s brilliant that it made it onto the first priorities of the new government. I only hope that the warm words and stern faces are backed up with the ability to make real change. #cybersecurity #KingsSpeech #sapphire
