UK Government Unveils New Cyber Action Plan

The UK government officially released a new Cyber Action Plan on Jan 6, 2026. The Foreword makes it clear: “The Government Cyber Action Plan is a core deliverable within the Roadmap for Modern Digital Government…” It is not a cyber action plan for business and offers nothing for the UK’s national critical infrastructure.

For business, it is disappointing. The government has developed a plan for itself but thinks that regulation is sufficient for the private sector: “Cyber risk is a challenge facing not just government, but our entire society. The Cyber Security and Resilience Bill will protect more essential and digital services from cyberattacks, requiring them to have appropriate and proportionate measures in place to manage risks, and better prevent disruption to healthcare, drinking water providers, transport and energy. Our response for government is the Government Cyber Action Plan…”

Regulatory compliance for private industry is just another threat and ...