Andrew’s team develop many of the important components that make the UK more resilient against cyber threats. These include the NIS regulations for critical national infrastructure, the Product Security Act to mandate minimum security requirements for consumer technology, and several codes of practice including those setting out security principles for software and AI. He is working to implement professional standards in the cyber workforce, secure supply chains with Cyber Essentials, and improve cyber governance.
Andrew has worked on digital policy for nearly 10 years, though he started his career as a software developer.