As cyber threats grow more complex and persistent, councils across Wales are taking proactive steps to protect vital public services from disruption.
Cyber incidents affecting UK public sector organisations have increased in recent years, with local authorities identified as high-value targets due to the volume of personal data they hold and the critical services they provide. The National Cyber Security Centre has reported a steady rise in cyber threats targeting the public sector, including phishing, ransomware, and supply chain attacks.
With cyber risk remaining at an all-time high, the Cyber Assessment Framework (CAF) is helping local authorities and fire and rescue services to measure and strengthen their resilience. The framework allows each organisation to identify vulnerabilities, prioritise improvements, and share learning through a collaborative, ‘Once for Wales’ approach.
The WLGA, working in partnership with Welsh Government, is supporting the rollout of the CAF and a range of other initiatives to raise awareness, increase preparedness, and ensure local services are better protected. These include cyber breach workshops, tabletop exercises, videos for staff training and CymruSOC – a centralised security operations centre providing ongoing cyber monitoring and support for councils.
Councillor Dimitri Batrouni, WLGA spokesperson for Digital and Workforce, said:
“Cyber resilience isn’t a luxury – it’s a necessity. As threats continue to evolve, councils need the tools and confidence to safeguard the systems that underpin the services people depend on.
“The Cyber Assessment Framework is a vital part of this effort. It helps councils understand their strengths and gaps and provides a structure for improvement. Ultimately, each council is best placed to decide what action to take – but no one is facing this challenge alone. Advice, support, and collaboration are at the heart of what we’re doing.”