Question to the Department for Energy Security & Net Zero:

To ask the Secretary of State for Energy Security and Net Zero, how many cyber security incident reports relating to energy infrastructure his Department received in the last 12 months.

Under the Network and Information Systems (NIS) Regulations, operators of essential services are required to report incidents that have an impact on the continuity of the essential services they provide. DESNZ has not received any reports of cyber incidents affecting the energy sector that met these mandatory reporting thresholds in the last 12 months.

The absence of reportable incidents should not be interpreted as an absence of cyber threats or risks. DESNZ continues to work closely with industry, regulators, and wider government to strengthen cyber resilience across the energy sector and encourage the timely reporting of cyber incidents and emerging threats.