UK government admits years of cyber policy have failed, announces reset

The UK government announced a Government Cyber Action Plan that admits systemic shortcomings in public-sector cybersecurity and pivots from guidance to a centralized, mandatory approach, including a new Government Cyber Unit, enhanced incident response coordination, and stricter expectations for strategic suppliers. Launched alongside the Cybersecurity and Resilience Bill, the plan aims to increase accountability for senior leaders but faces skepticism over enforcement and funding constraints, particularly given legacy IT debt and escalating state and criminal cyber threats.