UK Bill Amendments Would Let Ministers Block High-Risk Suppliers to Critical Infrastructure
Summary
Amendments to the UK Cyber Security and Resilience Bill would let ministers block critical-sector organizations from using suppliers deemed high risk, following a reported four-day outage at a small energy facility.
Key points
- Amendments tabled on August 24, 2026, would give ministers power to prevent critical-sector organizations from using technology suppliers deemed high risk.
- The bill had passed through the House of Commons and moved to the House of Lords; the amendments were proposed as it approached Royal Assent.
- The report says The Telegraph reported that Iran-linked adversaries forced a small UK energy facility offline for four days; the article provides no further incident evidence.
- The proposed supplier-blocking power would go beyond the bill’s existing incident-reporting requirements and penalties.
- The article highlights that smaller suppliers and SMEs serving critical infrastructure may create supply-chain security risks.
Article Details
- Event Type
- UK Cyber Security and Resilience Bill amendments proposing powers to block critical-sector organizations from using suppliers deemed high risk, following a reported cyberattack on a UK energy facility.
- Impact
- The Telegraph reported that Iran-linked adversaries targeted a small-scale UK energy facility and took it offline for four days; the article says the incident had no serious effect. The proposed amendments would allow ministers to prevent critical-sector organizations from using technology suppliers deemed high risk, extending government action on supply-chain security.
People
Darren GuccioneKeeper Security CEO and co-founder; commented on the reported energy-facility incident and the proposed supplier-designation powers.Jamie AkhtarCyberSmart CEO and co-founder; commented on supply-chain security and the proposed measures.Shankar HaridasManageEngine UK business head; commented on the bill’s framing of cyberattacks affecting essential services as a public-safety threat.
Countries
IranOn August 22, 2026, The Telegraph newspaper reported that Iran-linked adversaries had targeted and forced a small-scale UK energy facility offline for four days.United KingdomThe UK Cyber Security and Resilience Bill (CSRB) has been given late amendments specifically targeting the supply chain threat against the nation’s critical infrastructure.