[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_kG-0CFXTPUApVSuVjQNcW4eFwhplrVU0aTPCowLPLc":3},{"article":4,"iocs":51,"watch_terms":52,"solutions":53,"lesson":56},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"04a962e4-29cf-4270-9ac9-3b3a66442969","UK proposes 14-year prison terms for undersea cable sabotage","uk-proposes-14-year-prison-terms-for-undersea-cable-sabotage-7606bf","In an era of hybrid threats, the British government wants to update the Submarine Telegraph Act 1885, which carries a maximum fine of £1,000 and five years’ imprisonment in cases of deliberate damage.","The UK government is proposing new legislation to increase penalties for damaging undersea cables and pipelines, with potential prison sentences of up to 14 years and unlimited fines. This move addresses growing concerns about hybrid warfare and state-sponsored attacks targeting critical subsea infrastructure, which carries the vast majority of the UK's international data traffic and energy supply. The proposed laws would replace outdated Victorian-era legislation and introduce new security requirements for operators.","UK proposes 14-year prison terms for undersea cable sabotage.","https:\u002F\u002Ftherecord.media\u002Fuk-undersea-cables-sabotage-new-sentencing-guidelines","http:\u002F\u002Fcms.therecord.media\u002Fuploads\u002Fundersea_cables_illustration_getty_unsplash_36603fb153.jpg","2026-10-23T13:26:00+00:00","2026-10-23T15:08:54.577162+00:00",7,[17,20,23,25],{"name":18,"type":19},"Russia","threat_actor",{"name":21,"type":22},"undersea cables","technology",{"name":24,"type":22},"pipelines",{"name":26,"type":27},"GUGI","vendor","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":28,"icon":30,"name":31,"slug":32},null,"Policy","policy",[34,39,44,46],{"category":35},{"id":36,"icon":30,"name":37,"slug":38},"23e81061-ab06-449f-8807-cbe4bc305045","UK Data Protection","uk-data-protection",{"category":40},{"id":41,"icon":30,"name":42,"slug":43},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":45},{"id":28,"icon":30,"name":31,"slug":32},{"category":47},{"id":48,"icon":30,"name":49,"slug":50},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[26],{"controls":54,"vendors":55},[],[],{"slug":57,"title":58,"body":59,"framework_refs":60,"framework_notes":68},"uk-moves-to-criminalize-undersea-cable-sabotage-with-14-year-sentences","UK Moves to Criminalize Undersea Cable Sabotage with 14-Year Sentences","The UK's proposed legislation highlights a critical gap in the legal framework protecting undersea cables and pipelines — infrastructure so vital that it carries the vast majority of the nation's international data and energy supply. Outdated Victorian-era laws failed to reflect the strategic importance of this infrastructure in the modern era of hybrid warfare and state-sponsored attacks. This matters because without strong deterrents, legal clarity, and mandated security requirements, critical subsea assets remain attractive and relatively low-risk targets for adversarial actors. The move signals a broader recognition that physical infrastructure security must be treated with the same urgency as cybersecurity, and that regulatory frameworks must evolve alongside emerging threat landscapes.",[61,62,63,64,65,66,67],"NIS2 Article 21(2)(b)","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","CIS Control 17: Incident Response Management","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 Clause 7.2: Competence","DORA Article 9",{"DORA Article 9":69,"NIS2 Article 21(2)(b)":70,"NIST SP 800-53 SI-2: Flaw Remediation":71,"ISO\u002FIEC 27001:2022 Clause 7.2: Competence":72,"CIS Control 17: Incident Response Management":73,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":74,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":75},"DORA's requirements for ICT risk management and resilience of critical infrastructure services are directly relevant, as undersea cables underpin the digital connectivity that financial and other essential services depend on.","NIS2 requires operators of essential services to implement incident handling and physical security measures — precisely what was lacking under the outdated legal framework governing undersea cables.","The legislative gap — an identified 'flaw' in the protective framework — went unremediated for decades, underscoring the need for systematic review and updating of security controls, including legal ones.","Operators of critical subsea infrastructure must ensure staff and security personnel are competent to identify, report, and respond to hybrid warfare threats targeting physical assets.","A defined and rehearsed incident response plan for physical attacks on critical infrastructure would reduce response time and limit damage when sabotage events occur.","While physical in nature, this incident reflects a broader vulnerability management failure — the 'vulnerability' of undersea cables was known yet unaddressed by adequate legal or technical safeguards.","Controlling who can physically access and operate near critical subsea infrastructure is a foundational protection that new security requirements for operators should mandate."]