UK Inquiry Tracker

Cyber security in the UK inquiry

Public Accounts Committee Closed Inquiry

Opened: 15 Mar 2019 Closed: 19 Sep 2018 Parliament page

The UK has one of the world’s leading digital economies, making it more vulnerable to cyber-attacks from hostile countries, criminal gangs and individuals, which continue to increase and evolve as it becomes easier and cheaper to launch attacks. While all public and private organisations are responsible for safeguarding their own … Read more The UK has one of the world’s leading digital economies, making it more vulnerable to cyber-attacks from hostile countries, criminal gangs and individuals, which continue to increase and evolve as it becomes easier and cheaper to launch attacks. While all public and private organisations are responsible for safeguarding their own information, since 2010 government has taken a central lead to ensure the UK effectively manages its exposure to cyber risks. The Cabinet Office leads this work, through successive National Cyber Security Strategies published in 2011 and 2016; and separate National Cyber Security Programmes designed to help deliver each Strategy between 2011-2016 and currently between 2016-21. In March 2019, the National Audit Office (NAO) published a report which found that the first national cyber security programme for 2011-2016 did not achieve sufficient change to stay ahead of the cyber threat. The report further notes that the Department did not undertake a comprehensive lessons-learnt evaluation of the first programme, so there was no robust baseline to inform the current Programme. Finally, the report underlines that the Department did not produce a business case for the Programme, meaning there was no way to assess how much funding was required for it. The Committee’s report on Protecting information across government in 2017 concluded that it had taken too long to consolidate and coordinate the ‘alphabet soup’ of agencies involved in protecting Britain in cyberspace. The Committee also considered cyber security risks in 2018 in its reports on Online Fraud and Wannacry, the cyber-attack on the NHS . On 1 April, the Committee will question Sir Mark Sedwill, Cabinet Secretary and National Security Adviser, along with other senior officials from the Cabinet Office and National Cyber Security Centre about the failure to establish its current strategy in line with good practice. Members will also ask how and by when the Department will improve the performance of the current Programme, as well as challenge officials to provide a commitment on how it plans to build on its current cyber security beyond 2021. The Committee may also want to use this session to question Sir Mark Sedwill, the former Permanent Secretary at the Home Office, on Windrush, the Disclosure and Barring Service (DBS) and the emergency services network (ESN). Show less

1 Report

1 Oral session

3 Letters

1 Event

Activity timeline 6 events

5 Nov
2019

Correspondence

Letter from the Cabinet Office to Chair regarding cyber security in the UK - dated 4 November 2019

8 Oct
2019

Correspondence

Letter from Madeleine Alessandri to Chair, in response to the Committee's report on Cyber security in the UK - dated 26 September 2019

11 Jun
2019

Correspondence

Letter from the Cabinet Office to Chair, regarding National Cyber Security Strategy update - dated 31 May 2019

5 Jun
2019

Report published

99th Report - Cyber security in the UK

1 Apr
2019

Oral evidence

Oral evidence session

1 Apr
2019

Formal meeting (oral evidence session) · The Grimond Room, Portcullis House

Committee event

Oral evidence sessions 1 session

1 Apr 2019

View on parliament.uk

Reports 1 report · click to expand

Title	HC No.	Published	Items	Response
99th Report - Cyber security in the UK	HC 1745	5 Jun 2019	0	Responded

Correspondence 3 letters

5 Nov 2019 To committee Letter from the Cabinet Office to Chair regarding cyber security in the UK - dated 4 November 2019

Parliament page

8 Oct 2019 To committee Letter from Madeleine Alessandri to Chair, in response to the Committee's report on Cyber security in the UK - dated 26 September 2019

Parliament page

11 Jun 2019 To committee Letter from the Cabinet Office to Chair, regarding National Cyber Security Strategy update - dated 31 May 2019

Parliament page