Question to the Cabinet Office:

To ask the Minister for the Cabinet Office, with reference to the Budget Information Security Review, February 2026, paragraph 1.2, if she will publish the terms of reference of the Cabinet Secretary’s review of cross-government publishing of sensitive information.

The review is being conducted by the Government Internal Audit Agency and is looking into cross-government website publishing. The aim is to validate and strengthen the effectiveness and consistency of publication processes on GOV.UK and on non-GOV.UK websites, particularly with respect to sensitive information. As it is not standard practice to publish the terms of reference of GIAA reviews, there are no plans to do so; however, the objectives are as follows:

1. Understand and validate the consistency of application of controls designed to secure appropriate publication on GOV.UK.

2. Understand and validate the consistency of application of controls designed to secure appropriate publication on independent websites.

3. Make observations concerning weaknesses in control design and/or effectiveness identified.