PARLIAMENTARY WRITTEN QUESTION
(3 June 2025)

The Ministry of Defence has a strong cyber security governance function that reports annually to the Defence Board, Defence Executive Committee and the Defence Audit, Risk and Assurance Committee on the Department’s cyber security risk position.

The Department also provides an annual return to the Cabinet Office using the Cyber Assessment Framework (CAF), developed by the National Cyber Security Centre (NCSC). The Department does not routinely release an annual report on cyber resilience into the public domain due to National Security reasons.