Iranian State-sponsored Cyber Attacks: Mitigation and Preparation

Lord Harris of Haringey Excerpts

Wednesday 11th March 2026 Lords Chamber

Asked by

[Lord Harris of Haringey]

To ask His Majesty’s Government what advice they are giving to (1) the general public, and (2) businesses, about what steps they should take to mitigate and prepare for the consequences of Iranian state-sponsored cyberattacks, sabotage or disruption arising from recent events in the Middle East.

[Lord Harris of Haringey (Lab)]

My Lords, I refer to my interest, as recorded in the register, as chair of the National Preparedness Commission and beg leave to ask the Question standing in my name on the Order Paper.

[The Parliamentary Secretary, Cabinet Office (Baroness Anderson of Stoke-on-Trent) (Lab)]

My Lords, the National Cyber Security Centre is closely monitoring the situation in the Middle East and directly engaging with critical sectors, providing immediate and specific information and advice. It has issued an alert, urging all organisations, especially those with assets or supply chains in the region, to remain vigilant. While it is likely that the direct cyber threat from Iran to the UK has not changed, NCSC advises organisations to strengthen their cyber security posture due to the fast-evolving nature of the conflict. The National Protective Security Authority also issued updated guidance last year on countering the threat of sabotage, helping organisations to protect their sites from physical threats.

[Lord Harris of Haringey (Lab)]

My Lords, I am grateful to my noble friend for that reply. I am also grateful for what the National Cyber Security Centre has been doing in terms of targeted advice. However, last week four people were arrested by the Metropolitan Police under the National Security Act for what has been reported as spying against Jewish organisations— so there is an issue about that in terms of the risk of Iranian sabotage. There has also been a series of incidents across Europe and in this country of Russian-inspired or Russian paid-for attacks on various businesses. What is the general advice given to the public, to small businesses and to larger businesses in terms of the precautions they ought increasingly to take under the current international situation?