Written question asked by Baroness Finn (Conservative) on Tuesday, 29 April 2025, in the House of Lords. It was due for an answer on Wednesday, 14 May 2025. It was answered by Baroness Jones of Whitchurch (Labour) on Wednesday, 14 May 2025 on behalf of the Department for Science, Innovation and Technology.

Electronic Government

Question: To ask His Majesty's Government whether the National Cyber Security Centre has warned about shortcomings with the One Login system, including risks of bulk personal data breach and mass impersonation fraud; and whether such warnings were shared with the Infrastructure and Projects Authority or the Cabinet Office Audit and Risk Committee.

Answer: The GOV.UK One Login programme works closely with the National Cyber Security Centre (NCSC) to identify and mitigate risks and align to the Cyber Assessment Framework (CAF). NCSC advises One Login on any key risks which should be prioritised as part of our security efforts. This independent review by NCSC is something we encourage and have continued to prioritise since the programme was established. As a Government Major Projects Portfolio programme (GMPP), the programme is subject to regular internal and external scrutiny and reporting. The Infrastructure and Projects Authority has reviewed the programme positively in the last three Assurance Gateway Reviews.

Secondary information

Type: Written question
Reference: HL7013
Session: 2024-26
Related items: Electronic Government
Wednesday, 4 June 2025
Written questions
House of Lords
Subjects: Electronic government Infrastructure and Projects Authority Cybersecurity National Cyber Security Centre Cabinet Office Audit and Risk Committee
Link: View this Written question on www.parliament.uk