Government cyber resilience

Public Accounts Committee Closed Inquiry
Opened: 15 Jan 2025 Closed: 17 Jul 2025 Parliament page
In 2022, the Government set itself a target for critical functions to be significantly hardened to cyber-attack by 2025. It also aims for the whole public sector to be resilient to known vulnerabilities and attack methods by 2030 at the latest. Alongside a recognition that there is a significant gap … Read more
15 Recommendations
20 Conclusions
1 Report
1 Oral session
1 Letter
1 Event
Oral evidence sessions 1 session
Bella Powell · Cabinet Office Cat Little · Cabinet Office Joanna Davinson · Cabinet Office Vincent Devine · Cabinet Office
Recommendations & Conclusions
1 result
23 Recommendation Accepted in Part
24th Report - Government cyber res…
GovAssure not designed to assess all critical systems despite improvement goals.
We asked the Cabinet Office how it would increase the scale and pace of GovAssure to assess the cyber resilience of all of government’s critical systems. The Cabinet Office explained that it did not plan to assess 100% 43 C&AG’s … Read more
Government Response
The government agrees to the recommendation, aiming for implementation by Spring 2026, and commits to requiring departments to identify and report critical systems through GovAssure, driving its adoption across government, and determining optimal assessment scale and frequency. However, it does not explicitly detail how GovAssure will be made quicker and easier for departments.
HM Treasury
View details
Government Response AI assessment · 34 of 15 classified

Total 15 recs + 20 conclusions
Correspondence 1 letter
31 Mar 2025 To committee Letter from the Civil Service Chief Operation Officer and Cabinet Office Permanent Secretary relating to the oral evidence session held on 10 March 2025 on Government Cyber Resilience, 24 March 2025
Parliament page