---

Government Cyber Security Strategy 2022-2030

Further to my statement to the House on Wednesday 15 December on the National Cyber Strategy (HCWS484), I am pleased to announce the publication of the Government Cyber Security Strategy. This will deliver on the public sector resilience aspects of the national strategy which is critical to realising our ambitions as a cyber power.

Government has made significant progress in the last five years. The introduction of the Minimum Cyber Security Standards for Government in 2018, and the underpinning annual ‘Health Check’, signalled clear requirements for cyber security controls and behaviours and improved government’s understanding of its cyber security posture. Yet, while government’s recognition and understanding of cyber security risk has evolved, it has also highlighted the gap between where government cyber resilience is now and where it needs to be.

As such, the Government Cyber Security Strategy sets out the vision that core government functions are resilient to cyber attack, strengthening the UK as a sovereign nation and cementing its authority as a democratic and responsible cyber power. The measurable aim is for these critical functions to be significantly hardened to cyber attack by 2025, with all government organisations across the whole public sector being resilient to known vulnerabilities and attack methods no later than 2030.

A copy of the Government Cyber Security Strategy will be deposited in the Libraries of both Houses.