Question to the Cabinet Office:

To ask the Minister for the Cabinet Office, pursuant to the Answer of 14 November 2017 to Question 111537, on Deloitte, on how many occasions Deloitte reported to Government significant cyber security incidents in (a) 2016 and (b) 2017.

It is at the discretion of a company to choose whether to report cyber incidents to Government. The Government maintains the confidentiality of these reports and does not disclose the number of occasions an organisation has reported to us. The advice from the National Cyber Security Centre is that timely notification is strongly recommended.