Written question asked by David Reed (Conservative) on Wednesday, 8 July 2026, in the House of Commons. It was due for an answer on Monday, 13 July 2026. It was answered by Kanishka Narayan (Labour) on Friday, 17 July 2026 on behalf of the Department for Science, Innovation and Technology.

Data Centres: Outages

Question: To ask the Secretary of State for Science, Innovation and Technology, when her Department last conducted a risk assessment of the ability of data centres designated as Critical National Infrastructure to continue operating during a sustained cyberattack.

Answer: The Government keeps risks to Critical National Infrastructure, of which data centres are a part, under continuous review through the National Risk Register process and extensive engagement with industry. As the department responsible for data infrastructure, DSIT also conducts rolling assessments of the risk of a cyber-attack to data centres. This is supplemented by DSIT’s ongoing engagement with the sector to continuously test the capabilities of data centres against known threats, including cyber attacks. DSIT’s assessments consider the potential disruption, compromise or denial of essential services resulting from a successful cyber attack on data infrastructure, and inform national resilience planning assumptions.

Secondary information