UK injects just £210M into cyber plan to stop Whitehall getting pwnd

The UK announced a Government Cyber Action Plan with £210 million to create a Government Cyber Unit under DSIT, formalize a Government Cyber Profession, and subject departments to security standards comparable to those for critical infrastructure, aiming to improve risk management and incident response while potentially saving up to £45 billion annually. The move, alongside a Software Security Ambassador Scheme backed by major vendors and mirroring CISA’s secure-by-design push, follows high-profile government breaches, an NAO report on low-maturity controls, and widespread legacy risk; analysts welcomed the direction but warned that funding must tackle entrenched legacy systems, fragmented estates, and supply chain complexity.