Active 136 events
Lifecycle stage Implementation
1,605 days in stage

Cyber Security and Resilience (Network and Information Systems) Bill

Parliamentary timeline for Cyber Security and Resilience (Network and Information Systems) Bill, session 39 session. Bill type: Government Bill. Current stage: Report stage.


Showing all 136 signals
Family
Signal
Year
Body
Role

2026

93 events
27 Mar 2026 | Written question Department for Science, Innovation and Technology linked direct

To ask the Secretary of State for Science, Innovation and Technology, what assessment he has made of the adequacy of the Cyber Security and Resilience Bill's incident reporting criteria for capturing novel failure modes arising from autonomous or adaptive

Why linked: March 2026 PQ on the adequacy of the Bill's incident reporting criteria — directly on Bill design.

To ask the Secretary of State for Science, Innovation and Technology, what assessment he has made of the adequacy of the Cyber Security and Resilience Bill's incident reporting criteria for capturing novel failure modes arising from autonomous or adaptive

19 Mar 2026 | Written question Department for Science, Innovation and Technology linked direct

To ask the Secretary of State for Science, Innovation and Technology, with reference to the Cyber Security and Resilience Bill (Network and Information Systems) Bill, a) what estimate she had made of the shortage of the cybersecurity skills which will be

Why linked: March 2026 PQ on cost and impact estimates relating to the CSR Bill.

To ask the Secretary of State for Science, Innovation and Technology, with reference to the Cyber Security and Resilience Bill (Network and Information Systems) Bill, a) what estimate she had made of the shortage of the cybersecurity skills which will …

18 Mar 2026 | Written question Department for Science, Innovation and Technology linked direct

To ask the Secretary of State for Science, Innovation and Technology, what discussions she has had with ministerial colleagues from a) the Home Office, b) HM Treasury and c) the Department for Science, Innovation and Technology on coordinated action to ta

Why linked: March 2026 PQ on cross-departmental coordination on the Bill (Home Office, HMT, DSIT).

To ask the Secretary of State for Science, Innovation and Technology, what discussions she has had with ministerial colleagues from a) the Home Office, b) HM Treasury and c) the Department for Science, Innovation and Technology on coordinated action to …

6 Mar 2026 | Policy paper Department for Science, Innovation and Technology linked direct

factsheets

Why linked: DSIT-published factsheets on the CSR Bill, the practitioner-facing companion to the Bill.

Factsheets relating to the Cyber Security and Resilience (Network and Information Systems) Bill introduced to Parliament on 12 November 2025.

24 Feb 2026 | Debate linked direct

Cyber Security and Resilience (Network and Information Systems) Bill (Seventh sitting)

Why linked: Hansard for Public Bill Committee Seventh Sitting, 24 February 2026.

The Committee consisted of the following Members: Chairs: Emma Lewell, † Esther McVey, Dr Andrew Murrison, Graham Stringer † Chadwick, David (Brecon, Radnor and Cwm Tawe) (LD) † Cooper, Andrew (Mid Cheshire) (Lab) † Darlington, Emily (Milton Keynes Central) (Lab) …

10 Feb 2026 | Debate linked direct

Cyber Security and Resilience (Network and Information Systems) Bill (Fifth sitting)

Why linked: Hansard for Public Bill Committee Fifth Sitting, 10 February 2026.

The Committee consisted of the following Members: Chairs: Emma Lewell, Esther McVey, †Dr Andrew Murrison, Graham Stringer † Chadwick, David (Brecon, Radnor and Cwm Tawe) (LD) † Cooper, Andrew (Mid Cheshire) (Lab) † Darlington, Emily (Milton Keynes Central) (Lab) † …

10 Feb 2026 | Debate linked direct

Cyber Security and Resilience (Network and Information Systems) Bill (Sixth sitting)

Why linked: Hansard for Public Bill Committee Sixth Sitting, 10 February 2026.

The Committee consisted of the following Members: Chairs: Emma Lewell, Esther McVey, Dr Andrew Murrison, † Graham Stringer † Chadwick, David (Brecon, Radnor and Cwm Tawe) (LD) † Cooper, Andrew (Mid Cheshire) (Lab) † Darlington, Emily (Milton Keynes Central) (Lab) …

10 Feb 2026 | Committee sitting Public Bill Committees linked direct

Public Bill Committee: Cyber Security and Resilience (Network and Information Systems) Bill (Sixth sitting)

Why linked: Hansard for Public Bill Committee Sixth Sitting (10 February 2026).

The Committee consisted of the following Members: Chairs: Emma Lewell, Esther McVey, Dr Andrew Murrison, † Graham Stringer † Chadwick, David (Brecon, Radnor and Cwm Tawe) (LD) † Cooper, Andrew (Mid Cheshire) (Lab) † Darlington, Emily (Milton Keynes Central) (Lab) …

5 Feb 2026 | Debate linked direct

Cyber Security and Resilience (Network and Information Systems) Bill (Third sitting)

Why linked: Hansard for Public Bill Committee Third Sitting, 5 February 2026.

The Committee consisted of the following Members: Chairs: Emma Lewell, Esther McVey, Dr Andrew Murrison, † Graham Stringer † Chadwick, David (Brecon, Radnor and Cwm Tawe) (LD) † Cooper, Andrew (Mid Cheshire) (Lab) Darlington, Emily (Milton Keynes Central) (Lab) † …

5 Feb 2026 | Debate linked direct

Cyber Security and Resilience (Network and Information Systems) Bill (Fourth sitting)

Why linked: Hansard for Public Bill Committee Fourth Sitting, 5 February 2026.

The Committee consisted of the following Members: Chairs: Emma Lewell, †Esther McVey, Dr Andrew Murrison, Graham Stringer † Chadwick, David (Brecon, Radnor and Cwm Tawe) (LD) † Cooper, Andrew (Mid Cheshire) (Lab) Darlington, Emily (Milton Keynes Central) (Lab) † Gardner, …

3 Feb 2026 | Debate linked direct

Cyber Security and Resilience (Network and Information Systems) Bill (First sitting)

Why linked: Hansard for Public Bill Committee First Sitting, 3 February 2026.

The Committee consisted of the following Members: Chairs: Emma Lewell, Esther McVey, †Dr Andrew Murrison, Graham Stringer † Chadwick, David (Brecon, Radnor and Cwm Tawe) (LD) † Cooper, Andrew (Mid Cheshire) (Lab) † Darlington, Emily (Milton Keynes Central) (Lab) † …

3 Feb 2026 | Debate linked direct

Cyber Security and Resilience (Network and Information Systems) Bill (Second sitting)

Why linked: Hansard for Public Bill Committee Second Sitting, 3 February 2026.

The Committee consisted of the following Members: Chairs: †Emma Lewell, Esther McVey, Dr Andrew Murrison, Graham Stringer † Chadwick, David (Brecon, Radnor and Cwm Tawe) (LD) † Cooper, Andrew (Mid Cheshire) (Lab) † Darlington, Emily (Milton Keynes Central) (Lab) † …

3 Feb 2026 | Committee stage Department for Science, Innovation and Technology linked

Committee stage

A Bill to Make provision, including provision amending the Network and Information Systems Regulations 2018, about the security and resilience of network and information systems used or relied on in c

14 Jan 2026 | Guidance Department for Science, Innovation and Technology evidence

NIS Guidance for Downstream Gas and Electricity Operators of Essential Services in GB (v3.0)

Why linked: Filled the "Sector-specific guidance on NIS2 compliance issued by competent authorities" gap via web research

Sector-specific NIS compliance guidance issued by Ofgem (as joint competent authority with DESNZ) for downstream gas and electricity operators of essential services in Great Britain, updated January 2026 to reflect the evolving NIS/NIS2-aligned regulatory framework. Fulfils Ofgem's statutory duty under …

6 Jan 2026 | Second reading Department for Science, Innovation and Technology linked

Second reading

A Bill to Make provision, including provision amending the Network and Information Systems Regulations 2018, about the security and resilience of network and information systems used or relied on in c

2025

19 events
17 Dec 2025 | Research House of Commons Library linked direct

Cyber Security and Resilience (Network and Information Systems) Bill 2024-26

Why linked: Commons Library Briefing CBP-10442 on the CSR (NIS) Bill 2024-26 — the standard Library briefing on the Bill.

Type: Commons Briefing Paper (CBP-10442) A bill to improve cyber security and resilience is going through the Commons; it updates previous cyber security legislation and if passed will become UK law in 2026.

18 Nov 2025 | Other Department for Science, Innovation and Technology linked direct

Cyber Security and Resilience Bill

Why linked: Official Bill information page summarising scope and purpose of the legislation.

The Cyber Security and Resilience (Network and Information Systems) Bill proposes new laws to improve UK cyber defences and protect our essential public services.

17 Nov 2025 | Research Regulatory Policy Committee linked direct

RPC opinion: Cyber Security and Resilience (Network and Information Systems) Bill impact assessment

Why linked: Regulatory Policy Committee opinion on DSIT's impact assessment — the independent regulatory-burden scrutiny baseline for the Bill.

The RPC's opinion of the Department for Science, Innovation and Technology's impact assessment for the bill.

13 Nov 2025 | Announcement Department for Science, Innovation and Technology linked direct

Cyber Security and Resilience

Why linked: 13 November 2025 Lords Written Ministerial Statement (HLWS1054) repeating the Commons statement on Cyber Security and Resilience.

UIN: HLWS1054 I am repeating the following Written Ministerial Statement made today in the other place by my Honourable Friend, the Parliamentary Under-Secretary of State (Minister for AI and Online Safety), Kanishka Narayan MP.In June 2024, Synnovis, a supplier of …

12 Nov 2025 | Announcement Department for Science, Innovation and Technology linked direct

Cyber Security and Resilience

Why linked: 12 November 2025 Written Ministerial Statement (HCWS1046) framing the Bill against the Synnovis ransomware attack.

UIN: HCWS1046 In June 2024, Synnovis, a supplier of pathology services to the NHS, was the victim of a ransomware attack. Computer systems were hacked, private patient data was stolen, and IT systems were rendered useless. This resulted in disruption …

12 Nov 2025 | Bill introduced Department for Science, Innovation and Technology linked

First reading

A Bill to Make provision, including provision amending the Network and Information Systems Regulations 2018, about the security and resilience of network and information systems used or relied on in c

9 Apr 2025 | Policy paper Department for Science, Innovation and Technology linked direct

Cyber Security and Resilience Bill: policy statement

Why linked: April 2025 DSIT policy statement directly preceding the Bill, naming the legislative measures that became the CSR Bill.

This statement details the confirmed and proposed measures in the Cyber Security and Resilience Bill, which will be laid before Parliament later this year.

1 Apr 2025 | Announcement Department for Science, Innovation and Technology linked direct

Cyber Security and Resilience Policy Statement

Why linked: April 2025 Commons Written Ministerial Statement (HCWS572) on the Cyber Security and Resilience policy statement.

UIN: HCWS572 Today the Government has published a policy statement on proposed legislative measures to bolster the UK’s cyber security and resilience.Our digital economy and essential services are increasingly being attacked by cyber criminals and state actors, threat...

1 Apr 2025 | Announcement Department for Science, Innovation and Technology linked direct

Cyber Security and Resilience Policy Statement

Why linked: April 2025 Lords Written Ministerial Statement (HLWS570) on the Cyber Security and Resilience policy statement.

UIN: HLWS570 I am repeating the following Written Ministerial Statement made today in the other place by my Honourable Friend, the Parliamentary Under-Secretary of State for AI and Digital Government, Feryal Clark MP.Today the Government has published a policy stateme...

28 Mar 2025 | Written question Department for Science, Innovation and Technology linked direct

To ask the Secretary of State for Science, Innovation and Technology, whether he plans to include provisions within the Cyber Security and Resilience Bill on requiring regulated organisations to adopt cybersecurity to help tackle AI-enabled threats.

Why linked: March 2025 PQ on whether the Bill will include provisions on requiring regulated organisations to adopt specific measures — directly on Bill scope.

To ask the Secretary of State for Science, Innovation and Technology, whether he plans to include provisions within the Cyber Security and Resilience Bill on requiring regulated organisations to adopt cybersecurity to help tackle AI-enabled threats.

28 Mar 2025 | Written question Department for Science, Innovation and Technology linked direct

To ask the Secretary of State for Science, Innovation and Technology, whether the Cyber Security and Resilience Bill will ensure that data centres are (a) secure and (b) resilient.

Why linked: March 2025 PQ on whether the Bill will ensure data centres are secure and resilient — directly on Bill scope.

To ask the Secretary of State for Science, Innovation and Technology, whether the Cyber Security and Resilience Bill will ensure that data centres are (a) secure and (b) resilient.

3 Mar 2025 | Written question Department for Science, Innovation and Technology linked direct

To ask the Secretary of State for Science, Innovation and Technology, what steps his Department is taking to ensure that the public sector is adequately protected under the forthcoming Cyber Security and Resilience Bill, and whether he plans to extend reg

Why linked: March 2025 PQ on the public sector's protection under the forthcoming CSR Bill.

To ask the Secretary of State for Science, Innovation and Technology, what steps his Department is taking to ensure that the public sector is adequately protected under the forthcoming Cyber Security and Resilience Bill, and whether he plans to extend …

2024

2 events
29 May 2024 | Other linked direct

Should our successor Committee wish to examine the cyber security and resilience of the UK’s critical national infrastructure, we recommend it considers: • Following up how the Government is monitoring the emerging threats from nation states, state-sponsored actors, and criminal organisations on the UK’s critical national infrastructure. This should include the threat from pre- positioning; • considering how the Government is protecting and strengthening critical national infrastructure suppl...

Why linked: Cited by workspace synthesis

Should our successor Committee wish to examine the cyber security and resilience of the UK’s critical national infrastructure, we recommend it considers: • Following up how the Government is monitoring the emerging threats from nation states, state-sponsored actors, and criminal …

18 Mar 2024 | Written question Department for Science, Innovation and Technology linked direct

To ask His Majesty's Government what plans they have to publish draft legislation incorporating proposed reforms to the Network and Information Systems Regulations 2018.

Why linked: March 2024 PQ on plans to publish draft legislation incorporating proposed NIS reforms — directly on the lead-up to the Bill.

To ask His Majesty's Government what plans they have to publish draft legislation incorporating proposed reforms to the Network and Information Systems Regulations 2018.

2023

5 events
19 Dec 2023 | Policy paper Department for Science, Innovation and Technology linked direct

Department for Science, Innovation and Technology: framework documents

Why linked: Cited by workspace synthesis

Framework documents setting out the relationship between departments and their public bodies.

14 Dec 2023 | Consultation (closed) Department for Science, Innovation and Technology Context · primary home: Cyber Security And Resilience… linked evidence

Protecting and enhancing the security and resilience of UK data infrastructure

Why linked: Filled the "Government consultation responses on NIS2 transposition" gap via web research

We're seeking views on a proposed regulation to improve the security and resilience of data infrastructure, including data centres.

19 Oct 2023 | Guidance Department for Business, Energy & Industrial Strategy Department for Energy Security and Net Zero Context · primary home: Cyber Security Incentives and… linked evidence

Implementation of the Network and Information Systems Regulations 2018 for the energy sector in Great Britain

Why linked: Filled the "Sector-specific guidance on NIS2 compliance issued by competent authorities" gap via web research

High level policy principles for compliance with the Network and Information Systems (NIS) Regulations 2018, for operators in energy sector.

1 Sep 2023 | Guidance Department for Science, Innovation and Technology evidence

DESNZ Policy Guidance for the Implementation of the Network and Information Systems Regulations (September 2023)

Why linked: Filled the "Sector-specific guidance on NIS2 compliance issued by competent authorities" gap via web research

Statutory policy guidance issued by the Department for Energy Security and Net Zero (DESNZ) as competent authority for the energy sector in Great Britain, setting out NIS compliance obligations for operators of essential services including security duties, incident reporting thresholds, …

2022

7 events
30 Nov 2022 | Consultation outcome Department for Science, Innovation and Technology evidence

Government response to the call for views on proposals to improve the UK's cyber resilience

Why linked: Filled the "Government consultation responses on NIS2 transposition" gap via web research

The formal government response to the January–April 2022 public consultation on proposals to amend the NIS Regulations 2018 — the UK's primary legislative vehicle for NIS2-equivalent transposition. It summarises 304 survey responses, confirms the government will proceed with all major …

9 Aug 2022 | Consultation outcome Department for Business, Energy & Industrial Strategy linked direct

Implementation of the Network and Information Systems Regulations in the energy sector: amendments to guidance

Why linked: 2022 consultation outcome on amendments to NIS guidance for the energy sector — implementation-layer consultation in the same regime.

We're seeking views on proposed updates to guidance for operators in the energy sector on compliance with the Network and Information Systems Regulations 2018.

27 Jul 2022 | Analysis Department for Digital, Culture, Media & Sport Department for Science, Innovation and Technology linked direct

Second Post-Implementation Review of the Network and Information Systems Regulations 2018

Why linked: Second Post-Implementation Review of the NIS Regulations 2018 — full analysis document.

Second Post-Implementation Review of NIS — full analysis document.

27 Jul 2022 | Policy paper Department for Digital, Culture, Media & Sport Department for Science, Innovation and Technology linked direct

Second Post-Implementation Review of the Network and Information Systems Regulations 2018

Why linked: Second Post-Implementation Review of the NIS Regulations 2018 (July 2022) — direct evidence base for the CSR Bill.

This review assesses the effectiveness of the NIS Regulations, which were introduced in 2018 to improve the security & resilience of essential & digital services.

4 Jul 2022 | Announcement Department for Digital, Culture, Media & Sport linked direct

Second Post-Implementation Review of the Network and Information Systems Regulations 2018

Why linked: Lords Written Ministerial Statement repeating the Commons WMS on the Second Post-Implementation Review.

UIN: HLWS168 I am repeating the following Written Ministerial Statement made today in the other place by my Honourable Friend, the Minister for Media, Data, and Digital Infrastructure, Julia Lopez MP:Today I am publishing the statutory post-implementation review of th...

4 Jul 2022 | Announcement Department for Digital, Culture, Media & Sport linked direct

Second Post-Implementation Review of the Network and Information Systems Regulations 2018

Why linked: Commons Written Ministerial Statement publishing the Second Post-Implementation Review of the NIS Regulations 2018.

UIN: HCWS173 Today I am publishing the statutory post-implementation review of the Network and Information Systems Regulations 2018 on the Government’s website. This is the second review of the Regulations since their implementation.The Regulations came into force in ...

2021

3 events
17 Nov 2021 | Government response Department for Digital, Culture, Media & Sport Department for Science, Innovation and Technology linked direct

Government response to the call for views on amending the Security of Network and Information Systems Regulations

Why linked: 2021 call for views on amending the Security of Network and Information Systems Regulations — earlier consultation in the same reform chain.

2021 call for views on amending the Security of Network and Information Systems Regulations — earlier consultation in the same reform chain.

2020

6 events
10 Nov 2020 | Statutory Instrument linked direct

The Network and Information Systems (Amendment and Transitional Provision etc.) Regulations 2020

Why linked: NIS (Amendment and Transitional Provision etc.) Regulations 2020 (SI 2020/1245) — predecessor amending SI to the NIS regime.

The Network and Information Systems Regulations 2018 (S.I. 2018/506) (“the 2018 Regulations”), as amended by the Network and Information Systems (Amendment) Regulations 2018 (S.I. 2018/629), implement Directive (EU) 2016/1148 of the European Parliament and of the Council concerning measures for …

9 Nov 2020 | Policy paper Department for Digital, Culture, Media & Sport Department for Science, Innovation and Technology linked direct

Call for views on proposed amendments to the Network and Information Systems Regulations

Why linked: Call for views on proposed amendments to the NIS Regulations (November 2020), part of the precursor consultation chain.

The government wants to improve the Network and Information Systems (NIS) Regulations and is seeking feedback from industry on the proposed changes.

9 Nov 2020 | Government response Department for Digital, Culture, Media & Sport Department for Science, Innovation and Technology Context · primary home: Cyber Security Incentives and… linked evidence

Government response to the call for views on proposed legislation amending the Network and Information Systems Regulations 2018

Why linked: Filled the "Government consultation responses on NIS2 transposition" gap via web research

Government response to the call for views on proposed legislation amending NIS 2018 — direct precursor to SI 2020/1245.

2017

1 event