Ministers should tell the public plainly about hybrid threats to banking, energy and water systems. Infrastructure that people depend on recovers best when households, firms and local services understand the risk and have prepared for disruption.
Key takeaways
- A former UK national security adviser has said ministers must be honest with the public about the immediate threat from Russia, according to the Guardian.
- The warning centres on “hybrid attacks”, which combine cyber operations, sabotage and disinformation and are designed to stay below the threshold of open war.
- Banking, energy and water systems are named as the areas where greater resilience against cyber-assaults is most needed.
- Telling the public more carries real risks, including alarm, fatigue and giving information to adversaries, so the case for candour depends on how the information is shared.
The argument: honesty about hybrid threats is itself a resilience measure
The Guardian reports that a former national security adviser, who served under David Cameron’s government, has urged ministers to be honest with the British public about the threat posed by Russia. He warned that the threat is immediate and could soon lead to lives being lost. According to the report, he called for more resilience in how the UK protects banking, energy and water systems from cyber-assaults. He is the latest of several prominent figures to warn about the scale of hybrid attacks attributed to Russian state forces.
This article does not try to judge the intelligence behind that warning, which is not public. It looks at the principle underneath it: that governments facing hybrid threats should explain those threats openly rather than handle them mainly behind closed doors.
The argument goes like this. Hybrid attacks are not aimed only at military targets. They aim at the systems that ordinary life runs on: payments, power, heating, clean water, communications. If those systems fail, the first people affected are households, small businesses, hospitals, schools and local councils, not defence ministries. Resilience therefore depends on how well millions of non-specialists cope with disruption, and not only on how well government agencies can defend networks. People cannot prepare for a risk they have not been told about. Public candour is part of the defence and should not be treated as a courtesy.
Three kinds of evidence support this view.
Critical infrastructure is digital, interconnected and widely owned
The first point concerns how modern infrastructure is built. Banking, energy and water, the three sectors named in the Guardian’s report, all rely heavily on networked computer systems. Payments clear electronically. Electricity grids are balanced by software that matches supply to demand. Water treatment and pumping use industrial control systems that are often monitored and adjusted remotely.
These sectors also depend on one another. Water pumping needs electricity. Banks need power and telecommunications. Energy companies need working payment systems to buy fuel and pay staff. A successful attack on one sector can therefore spread into others in ways that are hard to predict from inside any single organisation.
In the UK, much of this infrastructure is owned and run by private companies, not the state. Government can set rules, share intelligence and give guidance, but it does not directly manage most of the systems an attacker would target. Defending them depends on many separate boards, engineers and suppliers deciding that the threat is serious enough to spend money and management attention on.
Clear public statements from ministers help here. When the government says openly that a threat is real and current, company boards find it harder to treat cyber-resilience as a cost to cut. Regulators get political backing to require improvements. Investors and customers have a reason to ask questions. A threat discussed only in classified briefings tends to create less pressure across a sector that is largely in private hands.
Resilience depends on preparation well beyond government
The second point concerns what resilience means in practice. It is often described as the ability to absorb a shock and recover quickly, not only to stop the shock happening at all. No defender can guarantee that every attack will be blocked, so the question becomes how much harm a disruption causes and how long it lasts.
The answer depends heavily on preparation outside central government. A hospital with tested backup power and paper-based fallback procedures copes better than one without them. A local authority that has rehearsed what to do if water supplies are interrupted can move faster. A small business that keeps offline records and some way to take payments without a card terminal can keep trading. Households with basic supplies and an understanding of official advice put less strain on emergency services.
None of this happens by itself. It needs people to accept that disruption is plausible enough to justify the effort and cost. Guidance on emergency preparedness tends to be ignored when the risk seems remote or abstract. When senior figures describe the threat in concrete terms and link it to services people use every day, preparation looks reasonable rather than eccentric.
The warning reported by the Guardian, that the threat could soon lead to lives being lost, is the sort of statement that changes how risk is perceived. Whether that assessment is correct cannot be checked from public information. The underlying logic still holds: a society that understands what is at stake is more likely to prepare for it.
Hybrid attacks are designed to exploit ambiguity and silence
The third point concerns the nature of hybrid warfare. The term usually covers a mix of methods: cyber intrusions, sabotage of physical assets, covert influence operations and disinformation, often used together and often deniable. The aim is to cause damage, spread uncertainty and weaken trust while staying below the level of attack that would clearly justify a military response.
Ambiguity is a central feature. An outage may look like a technical fault. A fire may look like an accident. A rumour on social media may look like ordinary public worry. Attribution can take a long time, and governments are often cautious about naming those responsible.
Silence plays into this design. If disruptions happen and the public has heard nothing about the wider threat, the space is filled by speculation, conspiracy theories and deliberately planted false stories. That loss of trust is itself one of the goals of hybrid operations. A population that has already been told what hybrid attacks look like, and why they happen, is better placed to tell real warnings from manipulation and to put its trust in official sources during an incident.
In this sense, honesty works as a pre-emptive defence against disinformation. It cannot stop false stories spreading, but it can make them less effective.
The case against: candour can alarm, exhaust and inform adversaries
There are serious arguments against the call for more public openness, and they deserve fair consideration.
First, intelligence about specific threats often depends on sensitive sources and methods. Describing a threat in detail can reveal what the government knows and how it found out, which may let an adversary change tactics or expose the people providing information. Officials who stay quiet in public are not necessarily hiding anything. They may be protecting the capabilities that allow threats to be detected in the first place.
Second, telling people more does not always make them better prepared. Repeated warnings that are not followed by visible events can lead to fatigue and scepticism, so that future warnings are ignored. Vague but alarming messages can cause anxiety without any clear action for people to take. In the worst case, they could prompt panic buying or rushes to withdraw money, causing the very disruption an attacker wants.
Third, public statements about an adversary are themselves part of international politics. Stressing a threat may be read abroad as escalation, may limit diplomatic options, or may give the adversary a propaganda victory by showing how much worry it can cause. Saying less in public can be a deliberate strategic choice.
Fourth, resilience can be improved without wide public discussion. Regulators can set binding standards for infrastructure operators, intelligence can be shared privately with the companies concerned, and emergency planning can be strengthened through existing local structures. On this view, the most useful work is technical and institutional, not rhetorical, and calls for public honesty risk mistaking communication for action.
Together these points make a strong case. They suggest that the useful question is less whether ministers should be honest and more what kind of honesty helps: general and practical openness about the nature of the threat and what people can do, combined with discretion about specific intelligence.
Evidence that would change the conclusion
Several kinds of evidence would weaken or overturn the argument made here.
If studies of public risk communication showed that more open warnings about national security threats reliably increased anxiety without improving preparation, the case for candour would be much weaker. The same would be true if such warnings were found to make disinformation spread faster rather than slower.
If it emerged that the most important resilience improvements in banking, energy and water came almost entirely from private regulation and technical work, with public awareness making little difference, then the emphasis on ministerial honesty would be misplaced.
If the threat assessment behind the warning turned out to be overstated, the risk of fatigue and lost credibility would grow. Credibility is hard to rebuild once lost. A government seen to have exaggerated one threat may struggle to be believed about the next.
On the other hand, evidence that disruptions had caused avoidable harm because people and organisations were not prepared would strengthen the argument considerably. So would evidence that disinformation had spread more easily during incidents that came with no prior public explanation.
At present, the full intelligence picture behind the warning reported by the Guardian is not publicly known, and neither is the extent to which ministers’ public messaging already reflects it. Until more of that becomes clear, the case for candour rests mainly on the structure of modern infrastructure and the design of hybrid attacks rather than on any specific disclosed threat.
Sources and further reading
- The Guardian, technology section: report on a former national security adviser’s warning about Russian hybrid threats to UK infrastructure.
- UK government publications on national security strategy and critical national infrastructure, for the official framing of resilience.
- National cyber security agency guidance for operators of essential services, for practical resilience measures in energy, water and finance.
- Academic and think-tank research on hybrid warfare and public risk communication, for evidence on how warnings affect behaviour.
Surfaced from the rss:guardian_tech signal “UK hybrid threat warning”. AI-assisted draft, editorially reviewed.
