Successive governments have made a series of promises designed to address the institutional failings outlined in the Information Security Review. Yet we remain concerned that the current government is not holding itself to, or delivering, the standards of information and data security needed to secure and maintain public trust. This failure threatens the government’s digital transformation ambitions, and undermines public trust in its planned digital ID. Major cultural transformation is required to prevent mass data breaches from happening in the future. (Conclusion, Paragraph 45)