The Cabinet Office has prioritised implementing its central initiatives, such as GovAssure. However, it has not put robust arrangements in place to oversee how departments are implementing the Strategy, such 65 Q 67 66 Q 61 67 Q 79; GCR0004, Written evidence submitted by Nigel D Cook; GCR0007, Written evidence submitted by The Open Cloud Coalition 68 Hansard, CrowdStrike: IT Outage, 22 July 2024 69 Q 80 17 as a cross–Government plan or performance framework.70 The National Audit Office (NAO) ...

The Cabinet Office has prioritised implementing its central initiatives, such as GovAssure. However, it has not put robust arrangements in place to oversee how departments are implementing the Strategy, such 65 Q 67 66 Q 61 67 Q 79; GCR0004, Written evidence submitted by Nigel D Cook; GCR0007, Written evidence submitted by The Open Cloud Coalition 68 Hansard, CrowdStrike: IT Outage, 22 July 2024 69 Q 80 17 as a cross–Government plan or performance framework.70 The National Audit Office (NAO) concluded that government would not meet its aim for “government’s critical functions to be significantly hardened to cyber attack by 2025”. The Cabinet Type: conclusion | Number: 32 | Response status: not_addressed Government response: 6.1 The government agrees with the Committee’s recommendation. Target implementation date: Winter 2025 6.2 Work is underway to define a future Target Operating Model for Cyber and Digital Resilience, which will set out how government and the public sector should o