Andy Burnham signals continuity on UK cyber policy, reappoints minister despite scrapping ministry

Following a government reshuffle, Liz Lloyd has been reappointed as the UK’s cybersecurity minister, signaling a continuation of the current cyber policy strategy. This decision was made as part of a broader overhaul of ministerial positions, with the former Department for Science, Innovation and Technology (DSIT) being divided into three separate units. Lloyd, who has been leading the government’s largest cybersecurity bill in years through the House of Lords, will continue to oversee the Cyber Security and Resilience Bill.

This reorganization places cyber policy under the Department for Digital, Culture, Media and Sport (DCMS), alongside Online Safety and a BBC Charter renewal. The Cyber Security and Resilience Bill aims to rewrite existing rules dating back to 2018 and extend Britain’s cyber regulations to encompass more organizations, particularly data centers and managed service providers, while granting ministers the power to issue directions to companies on national security grounds.

The bill also addresses vulnerabilities within critical infrastructure, including incident reporting deadlines for operators of essential services like energy, water, and healthcare. Lloyd previously played a role in weakening proposed cybersecurity protections for telecoms networks, initially developed in response to the Salt Typhoon espionage campaign, due to lobbying from companies citing cost and practicality concerns.

As part of the restructuring, the government is prioritizing strengthening UK cyber defenses and improving the cyber security of essential public and digital services. The move reflects a broader strategy to address state-backed and criminal hacking threats. The government spokesperson emphasized the importance of cybersecurity as an integral part of daily life and highlighted the strategic shift towards integrating technology across all sectors of the economy.