UK National Cyber Action Plan Delayed Again Amid Leadership Uncertainty

Summary

The UK’s National Cyber Action Plan has been delayed again amid Labour leadership uncertainty, though the government says it remains committed to publication. A Cyber Resilience Pledge launch with FTSE 350 companies is still expected.

Key points

The plan, which had been due for publication on Monday, was postponed amid the Labour leadership contest following Keir Starmer’s resignation; the government says it remains committed to publishing it.
The plan’s contents have not been officially disclosed. It is expected to focus on Threat, Growth and Resilience.
The Cyber Resilience Pledge launch is still expected to proceed, with FTSE 350 companies invited to make cybersecurity a board-level responsibility, join the NCSC Early Warning service and require Cyber Essentials certification across their supply chains.
NCSC chief executive Richard Horne’s June remarks outlined a “near, mid and far” cyberspace framing: defending organizations, hardening shared infrastructure and taking offensive action against adversaries.
Horne said the NCSC handled more than 200 incidents affecting critical national infrastructure and its supply chain between June 2024 and May 2026, with 75% linked to state actors.
The Cyber Security and Resilience Bill has also faced delays and is not expected to be enforced until 2028, according to the article.

Article Details

Event Type: Delay of the UK government’s National Cyber Action Plan amid political uncertainty following Keir Starmer’s resignation.
Impact: The delay postpones publication of the government’s forthcoming cybersecurity plan, whose expected pillars are Threat, Growth, and Resilience. The government says it remains committed to publishing it, and the Cyber Resilience Pledge launch is still expected to proceed with FTSE 350 companies. The article also reports that the Cyber Security and Resilience Bill is not expected to be enforced until 2028.

People

Jamie MacCollResearch fellow at the Royal United Services Institute; commented on the political attention given to cybersecurity.Richard HorneNCSC chief executive who described the government’s approach to cyber defense and the expected focus on near, mid, and far spaces.Tim StevensLeads the cybersecurity research group at King’s College London; commented on cybersecurity’s treatment as a low-priority political issue in Britain.

Threat Actors

QilinThe article reports that the Russia-linked group carried out a ransomware attack on pathology provider Synnovis, forcing London hospitals to declare a critical incident.

Countries

BritainBritain’s National Cyber Action Plan has been delayed again amid political uncertainty following Keir Starmer’s resignation, even as the government says it remains committed to publishing the document.RussiaDuring the 2024 election campaign, a ransomware attack on the pathology provider Synnovis by the Russia-linked Qilin group forced London hospitals to declare a critical incident, cancelling operations and appointments.