Question to the Cabinet Office:

To ask the Minister for the Cabinet Office, whether the Government Digital Service will publish the findings of its central monitoring of email vulnerability levels for departments since April 2017.

Government takes email security seriously but has no plans to publish details of specific monitoring or vulnerabilities. The National Cyber Security Centre, together with Government Digital Service, advocates the use of the DMARC protocol that makes email spoofing much harder.

In parallel, the National Cyber Security Centre has built a Mail Check service that monitors adoption of these standards. In May 2017 1,070 domains were using the Mail Check service, rising to 1,208 in June and 1,224 in July.