Parliamentary Search

Written question asked by Lord Taylor of Warwick (Non-affiliated) on Wednesday, 1 July 2026, in the House of Lords. It was due for an answer on Wednesday, 15 July 2026. It was answered by Baroness Lloyd of Effra (Labour) on Wednesday, 15 July 2026 on behalf of the Department for Science, Innovation and Technology.

Cybersecurity: Public Sector

Question

To ask His Majesty's Government what steps they are taking to reduce cybersecurity risks arising from the continued use of legacy IT systems in the public sector.

Answer

Earlier this year, DSIT published the Government Cyber Action Plan (GCAP). It represents a radical shift in the government’s approach, by holding organisations to account for managing cyber and digital resilience risks, setting much stronger central direction on minimum standards and priorities for transformation, and investing in scalable digital services and operational capability to better enable risk mitigation. The GCAP has a phased implementation through to 2030, but improvements are already visible. DSIT has established new risk structures to better manage cross government technology risk.

DSIT is taking forward wider work to understand, manage and remediate legacy technology across the public sector, including the development of a Legacy IT Action Plan.

Secondary information

Type
Written question
Reference
HL1566
Session
2026-27
Subjects
Public sector Cybersecurity
Link
View this Written question on www.parliament.uk