Question to the Department for Science, Innovation & Technology:

To ask His Majesty's Government what milestones have been met under the Government Cyber Action Plan, published on 6 January; and what proportion of the £210 million investment has been committed to date.

The Government Cyber Action Plan set out public milestones to hold Government to account for delivering improvements in cyber security and digital resilience.

The first tranche of milestones published under the Government Cyber Action Plan are due for completion by April 2027. Work is ongoing towards these milestones with some notable achievements including: the establishment of the Government Cyber Unit within DSIT; the establishment of central services and support functions; the launch of the Government Cyber Profession in February 2026, and the publication of the Government Cyber Incident Response Plan.

The noted investment is subject to standard business case approval procedures. DSIT will continue to report bi-annually on progress against NAO recommendations (from its 2025 report on Government Cyber Resilience) to enable parliamentary scrutiny of government spending.