Watchdog Urges UK Police and Fire Services to Improve Cybersecurity

An independent HMICFRS assessment published October 27 found weak cybersecurity across UK police forces and fire and rescue services. Issues include legacy ICT systems, third-party risk, poor access control and a lack of senior accountability. The inspectorate issued 13 recommendations, including baseline Cyber Assessment Framework standards and mandatory Cyber Essentials certification for ICT suppliers.

• The inspection ran from January to May 2026 and reviewed over 260 documents
• Legacy ICT systems were flagged as a strategic risk due to patching issues
• 13 recommendations include baseline standards and third-party assessments
• ICT suppliers may face mandatory Cyber Essentials certification