Policy paper

DCMS cyber security newsletter - September 2026

Published 15 September 2026

1. Director’s message 

I hope you had a good summer. It seems cyber security is rarely out of the news in recent months. The increasing focus on artificial intelligence is generating widespread interest and policymakers are looking ever more closely at the links with cyber security.  

Significant government action continues. Our Cyber Security and Resilience Bill is progressing through Parliament and recently completed the Lords committee stage. We will keep you updated on this as the Bill moves towards becoming law, which will help better protect our essential services. 

We also formally launched the government’s Cyber Resilience Pledge at 10 Downing Street in July, with over 140 firms now committing to strengthen their cyber defences. Has your organisation signed up yet? 

Since our last newsletter in the summer, my cyber security team has moved into a new digital department as part of wider changes introduced by the new Prime Minister.   

The new Department for Digital, Culture, Media and Sport (DCMS) brings together the digital services people rely on, the culture they enjoy, the sport they follow, the media they trust and the communities they belong to. Increasingly, these experiences are intertwined. And many of them rely on technology, underpinned by our work on cyber security. 

This is an exciting time to be working in cyber. We will be holding an online call later this month to discuss the changes with stakeholders and consider how we can continue to work together on cyber security – further details below. I hope you can make it.  

Rod Latham 

Director, Cyber Security  

2. Invitation to DCMS webinar on cyber security

Date: Thursday 24 September 

Time: 3pm to 3:45pm 

In July the team which champions the UK cyber security sector moved from the Department for Science, Innovation and Technology (DSIT) to the new Department for Digital, Culture, Media and Sport (DCMS). We take into this new department our people, funding and this government’s commitment to the success of the UK cyber security sector. 

We’d like to give you the opportunity to hear from us in DCMS about how our work is developing, our ongoing partnerships with other parts of government (including the Department for Business, Innovation, Science and Technology and the Treasury) and how you can influence policy development. 

This will be a 45 minute call, with plenty of opportunity for you to ask us questions. If you’re interested in attending, respond to our online form.   

3. Businesses invited to sign Cyber Resilience Pledge as ministers urge firms to strengthen cyber defences 

More than 140 businesses from every corner of the British economy, as well as strategic suppliers to government, have committed to strengthen their cyber defences by signing the new Cyber Resilience Pledge. 

Organisations signing the pledge commit to take the following actions: 

• Make cyber a Board responsibility 
• Sign up to the Early Warning service  
• Require Cyber Essentials across supply chains.  

For more information, read the press notice, see the list of signatories and find out how to sign up to the Pledge. 

4. Cyber Essentials scheme continues to grow 

The latest quarterly figures show a record number of businesses and organisations being awarded Cyber Essentials certificates. The highly effective scheme protects businesses of all sizes against the most common cyber attacks. Over the past year, up to 30 June 2026, 61,430 certificates were awarded, 46,245 at Cyber Essentials level and 15,185 at Cyber Essentials Plus. This is an increase on the previous total of 59,090 on 31 March 2026. 

For more information on Cyber Essentials, how to adopt it and how to get a free 30 minute session with a Cyber Advisor to help you on your way, please visit the Cyber Essentials website. 

5. New cyber security innovation hub opened at Lancaster University 

Lancaster University has stepped up its investment in growth and innovation by opening LENS, a new purpose-built co-working and collaboration space for digital, data and cyber security innovators. The new facility – opened by DCMS Deputy Director for Cyber Security, Andrew Elliot - brings together industry stakeholders, researchers and emerging talent. 

Minister for Cyber Security, Liz Lloyd, said ”cyber criminals are increasingly using AI in their attacks - but the UK’s defenders can stay ahead through innovation. Our brilliant universities are spearheading these efforts, combining world-class research, close partnerships with government and industry, and with a strong record of spinning out successful businesses. 

“Lancaster exemplifies this work, and LENS is exactly the kind of space that brings that capability together. It’s a great example of how, by connecting research, talent and industry, we can turn cutting-edge cyber security innovation into impact that boosts Britain’s resilience.” 

6. A call to action on post-quantum cryptography (PQC) 

The UK government has been taking part in the G7 cyber security working group to highlight the growing risks quantum computing poses to current public-key cryptography. The group is now urging organisations to begin the transition to post-quantum cryptography and help ensure the future security of encrypted data.  

The call to action has been signed by the UK, Canada, France, Germany, Italy, Japan and the USA. Read the full call to action. 

The UK’s National Cyber Security Centre previously published advice setting out the activities organisations must carry out to migrate safely to PQC in the coming years. 

7. New cyber security research 

• Cyber security literature on open-source software and AI (September 2026) 

• Mapping global AI security standards, regulations and guidance (July 2026) 

• Thematic review and gap analysis on AI security (July 2026) 

• Mapping of the AI and software security services market (July 2026) 

• Quantum key distribution research report (June 2026) 

• The changing cyber threat profile and potential impact on local councils (June 2026).