Question

To ask the Secretary of State for Digital, Culture, Media and Sport, how many government departments have completed the full discovery exercise described in the National Cyber Security Centre's guidance of 20 March 2025; and how many have produced an initial migration plan.

The Government Cyber Unit (GCU) in DCMS is publishing guidance recommending departments produce a post quantum cryptography (PQC) migration action plan by April 2027, and complete discovery of cryptographic assets by 2028. This is in line with the National Cyber Security Centre’s guidance. Following the publication of the Government PQC Migration guidance, GCU will ask departments to regularly update on progress of their migration planning.