How the CrowdStrike outage made IT supply chains the new big issue in tech

29 December 2024, 00:04

An information screen in the South Terminal at Gatwick Airport (PA)
IT outages. Picture: PA

The CrowdStrike outages, which brought infrastructure around the world to a standstill, placed new focus on IT supply chains.

The CrowdStrike outage – which caused massive disruption in the NHS, transport, banking and wider infrastructure – means the state of global IT supply chains became one of the big tech talking points of 2024.

The unlikely talking point came to the public’s attention in July, when a far-reaching global IT outage saw transport links shut down, parts of the NHS revert to pen and paper, and even TV broadcasters unable to get on the air.

It soon emerged the issue was a defect in a software update for Microsoft Windows users from cybersecurity firm CrowdStrike, with the flaw knocking systems offline.

The widespread nature of the issue was astonishing – transport hubs around the world went offline, as did systems linked to online banking, healthcare and media organisations.

Once it was established that the incident was not security-related or a cyber attack, attention quickly turned to just how vulnerable global IT systems were to widespread problems such as this, with many experts warning that one of the root causes was an over-reliance on small numbers of firms for IT systems.

They argued that this meant that a single issue with one provider, in this case CrowdStrike, meant millions of computers around the world could be knocked offline.

At the time of the outage, experts suggested there was an element of businesses sticking with what they know in using operating systems such as Microsoft’s Windows, and also concerns about the cost of training staff to use a new and different system could be part of the issue.

Industry expert Dafydd Vaughan, chief technology officer at consultancy Public Digital, said the Government needed to do more to boost competition within supply chains.

Taking the example of the NHS, which was badly impacted by the CrowdStrike outage, he said: “EMIS – a major provider of services to GP surgeries, handling health records, appointment bookings and more – is used in more than 60% of GP surgeries in England and Wales.

“The Government needs to consider the risk that comes with so few companies controlling so much of our essential infrastructure.

“In all industries, Government should see the value of more competition in their supply chains, and work to increase the number of companies that provide these essential services and avoid monopolies controlling our national infrastructure.”

That specific issue could be something raised in 2025, but in the meantime, the Government has already taken steps to boost the protection around IT infrastructure by announcing the designation of data centres as critical national infrastructure (CNI).

This means data centres are now on the same footing as vital utilities such as energy and water, and therefore receive additional support should a major incident affecting them occur.

This decision comes in a year where another wave of notable outages – beyond just CrowdStrike occurred – including a number of repeated issues and outages linked with banking apps in the UK, other Microsoft server issues, social media platform glitches and others.

The threat of cyber-attack also remains high, with industry and security experts warning that bad actors are increasingly looking at ways to disrupt infrastructure through cyber-attacks as a way of waging modern warfare.

After coming to power in July, the Labour Government said it would introduce the Cyber Security and Resilience Bill, which would give greater power to regulators to push more firms to implement better cybersecurity defences by expanding the remit of existing regulation and put regulators on a stronger footing, as well as increasing the reporting requirements placed on businesses to help build a better picture of cyber threats to the UK.

That Bill is set to be introduced to Parliament in 2025.

By Press Association

More Technology News

See more More Technology News

The icons for the smartphone apps DeepSeek and ChatGPT are seen on a mobile

Nations and tech firms to jostle for AI leadership at Paris summit

Nick Lees

Man who credits King over cancer diagnosis given pioneering robotic microsurgery

Ellen Roome with her 14-year-old son Jools Sweeney

Parents suing TikTok over children’s deaths ‘want answers’

The Apple logo in the window of an Apple store

Home Office orders Apple to let it access users’ encrypted files – report

Ellen Roome with her son Jools Sweeney

Bereaved families file US lawsuit against TikTok over access to children’s data

The OpenAI logo appears on a mobile phone in front of a computer screen with random binary data

OpenAI taking claims of data breach ‘seriously’

There are concerns over how technology is aiding the abuse of women (Alamy/PA)

Deepfake abuse crackdown a ‘really important blow in battle against misogyny’

The Football Manager 25 logo on a light purple background

Football Manager 25 cancelled after delays

Football Manager 25 has been cancelled after being hit by delays

Football Manager 25 cancelled after several delays

Carsten Jung, head of AI at the IPPR, warned that politics 'needs to catch up' with the implications of AI (PA)

AI could replace 70% of tasks in computer-based jobs, study says

General view of IMI headquarters at Lakeside, Birmingham Business Park, Birmingham.

Engineering group IMI latest UK firm to be hit by cyber attack

A person's hands on the keyboard of a laptop

PSNI exploring use of AI to analyse mobile phone evidence

A screenshot of the homepage of AI chatbot DeepSeek, showing a warning message about new users being unable to register for the app

DeepSeek reopens new user sign-ups despite ongoing security concerns

A Google logo on the screen of a mobile phone, in Londons

Google axes diversity hiring targets as it reviews DEI programmes

A person’s hand pressing keys of a laptop keyboard

UK to get new cyber attack severity rating system

People working at computers

Capital raised by tech start-ups under Government scheme doubles