Question to the Department for Energy Security & Net Zero:

To ask the Secretary of State for Energy Security and Net Zero, pursuant to the answer of 14 July 2026 to question 16796, how many reports were received in the last 12 months that did not meet the mandatory thresholds.

DESNZ does not routinely publish or disclose information relating to voluntary cyber incident reporting, as doing so could prejudice the security and resilience of operators and the wider energy sector. As a result, we do not provide figures on the number of voluntary reports received that fall below the NIS mandatory reporting thresholds.

Operators are encouraged to report cyber incidents and emerging threats to DESNZ, including those that do not meet the mandatory reporting thresholds, where there may be potential implications for energy sector resilience. Such reporting helps to improve situational awareness and supports cross-sector resilience activity.