Question to the Cabinet Office:

To ask His Majesty's Government what assessment they have made of the resilience of computing infrastructure supporting critical national infrastructure in the UK against (1) remote disablement, or (2) restriction, by an entity based outside the UK.

The Government keeps the resilience of critical national infrastructure under continual review, including risks arising from reliance on technology, services, and suppliers based outside the UK.

The government does not generally comment on national security or commercial matters related to CNI, including the use of individual suppliers.

Through the National Cyber Security Centre, sector regulators, and wider resilience frameworks, the Government works with operators to identify and mitigate risks to critical systems.

The Cyber Security and Resilience Bill will further strengthen the UK's cyber resilience framework. It will bring data centres who meet the threshold in scope, provide a framework to manage supply chain risks to essential and digital services and provide the Government with the flexibility to respond to new threats in the cyber landscape.