UK: Regulation Drives Cyber Spending for Critical Infrastructure Orgs

**Executive Summary:** Bridewell's Cybersecurity in CNI Report 2026, based on a 600-leader survey across 13 UK critical infrastructure sectors, finds regulatory compliance is increasingly driving security investment while adoption of frameworks like the CAF and NIS2 remains inconsistent; 93% of respondents reported a cyber incident in the past year, AI is a rising concern and defensive tool, and there is a notable confidence gap in post-quantum cryptography readiness.