Government Cyber Action Plan

Foreword 3

Ministerial Foreword 4

Chapter 1: Introduction 6

Introduction 7

Chapter 2: Approach 10

Scope 11

Objectives 14

Delivery strands 16

Delivery phases 18

Cultural change 20

Chapter 3: Accountability 22

Accountability overview 23

Cyber risk 25

Government-wide cyber risk 27

Organisational cyber risk 29

Lead government department model 30

Priority next steps 32

Chapter 4: Support 33

Support overview 34

Support offer 36

Support access 38

Priority next steps 40

Chapter 5: Services 41

Services overview 42

Service coordination 44

Service access 45

Service development 47

Priority next steps 48

Chapter 6: Response and Recovery 49

Response and recovery overview 50

Prepare 52

Detect 53

Respond and recover 55

Learn and improve 57

Priority next steps 59

Chapter 7: Skills 60

Skills overview 61

Profession 63

Attract and upskill 65

Retain and support 66

Leadership and workforce 67

Priority next steps 6

Chapter 8: The Government Cyber Unit 69

Central functions 70

Function interactions 72

Chapter 9: Implementation 73

Implementation targets 74

Implementation phases 76

Phase 1 – Building (by March 2027) 78

Phase 2 – Scaling (April 2027–2029) 85

Phase 3 – Improving (April 2029 and beyond) 91

Glossary 97

Glossary 98