Iranian State-sponsored Cyber Attacks: Mitigation and Preparation

Baroness Finn Excerpts

Wednesday 11th March 2026 Lords Chamber

[Baroness Finn (Con)]

My Lords, the National Audit Office recently examined the cyber threat facing the UK Government and reached some deeply concerning conclusions. It found that 58 critical government IT systems have significant gaps in their cyber resilience and that the Government do not even know how vulnerable at least 228 legacy systems are to cyber attack. It also highlighted a number of underlying weaknesses, shortage of cyber security skills within government and insufficient co-ordination across departments. In the face of what the NAO has described as a “severe and advancing” threat, with tensions in the Middle East further heightening the risk environment, can the noble Baroness set out what steps the Government are taking to address these shortcomings and strengthen the resilience of critical government systems?

[Baroness Anderson of Stoke-on-Trent (Lab)]

The noble Baroness will be aware that the cyber security and resilience Bill is in the other place, which is a starting point. I am aware of what she has highlighted and we are working across Government to fix it. There is also the cyber action plan, which will be published this spring.