Ofcom has published new guidance for communications providers on their obligations under the Communications Act 2003. The Communications Act 2003 applies to telecoms providers and requires them to take measures to protect  the security and resilience of their networks and services. Telecoms providers must notify Ofcom of a breach of security which has a significant impact on the operation of a network. The new guidance sets out steps to follow when deciding whether a security breach has had a “significant impact” and states that major incidents or incidents that are likely to generate media or political interest should be reported within 24 hours of commencing.

Ofcom guidance – 8 August 2014