My point was - you were right. There is no law/regulation anywhere that mandates public notification of cyber incidents that impact lives, well-being, environment, or economy. Authorities often have to be notified. But never the impacted public in a way that they would be in case of a data breach.

2/2 …(in e.g. a manufacturing plant) were caused by a targeted cyber sabotage, the incident was recorded as an industrial accident and neither the company, law enforcement, national security agencies (not-UK)…wanted to deal with it. It’s a tough problem. So let’s pretend it doesn’t exist.

Ciaran, well said! I spent 20 years of my career focused on these kind of attacks on cyber-physical systems. I coined the term “cyber-kinetic attacks” in the 1990s for these kind of cyber attacks that impact lives, well-being and the environment. Even when my teams conclusively proved that deaths…

Fifty shades of geopolitics