The Acting Governor said that work was continuing with the British Government to bolster Bermuda’s cybersecurity.

Dave Morgan was responding to questions from The Royal Gazette after the publication of a joint select committee report on the September 2023 cyberattack that disabled government IT systems. He referenced the Government of Bermuda Security and Defence Review.

The review is a joint initiative that aims to update Bermuda’s national security framework, and guide future planning and efficient targeting of budgets across key areas of risk and resilience.

Mr Morgan said: “The UK Government is working with the Government of Bermuda in support of their cybersecurity journey.

“As part of this, Bermuda takes part in regular pan-UK Overseas Territory community activity, which includes monthly meetings with their UKOT peers to exchange knowledge and share information with colleagues.

“The Government of Bermuda Security and Defence Review, scheduled to report in autumn 2026, is also including cyberthreats to Bermuda as part of its considerations.

“The intent is to understand the main areas of risk to Bermuda and to assign clear senior ownership for the identified risks, especially where these cut across a number of government departments and areas of operation.”

The JSC report said that a payment of $4.4 million from Bermuda’s coffers may have covered the ransom to the perpetrators of the cyberattack in Bermuda.

It shed light on events leading up to the attack, including an assessment that warned four months earlier that the island’s cybersecurity risk was “critical”.

The four-member committee concluded the payment was made but recommended an investigation by the Public Accounts Committee to look into who was paid, for what purpose and value, and with whose approval.

Douglas De Couto, the PAC chairman, said later that if there was desire among members, the committee could conduct a review.

“I will take the report to the PAC, we will review it and take a decision,” he added.

“The committee has to reach an agreement to go ahead.”