Cyber Security and Resilience (Network and Information Systems) Bill (First sitting)

Debate between Alison Griffiths and Sarah Russell

Committee stage
Tuesday 3rd February 2026 Public Bill Committees

[Sarah Russell (Congleton) (Lab)]

Q Obviously no one wants to put crippling costs on to businesses, but cyber-security costs money—there is no way of avoiding that. We only have to look at the JLR attack to see the scale of the impact on our economy when it does not work, and we are looking at only critical national infrastructure here. Have you had any information from business about whether and to what extent this will promote increased spending on cyber-security?

Jill Broom: We can assume that it will, because if you are in the supply chain or come within scope, you will have certain responsibilities and you will have to invest, not just in technology but in the skills space as well. How easy it is to do that is probably overestimated a bit; it is quite difficult to find the right skilled people, and that applies across regulators as well as business.

Generally speaking, yes, I think it will be costly, but there are things that could probably help smaller organisations: techUK has called for things such as financial incentives, or potentially tax credits, to help SMEs. That could be applied on a priority basis, with those working within the critical national infrastructure supply chain looked at first.

Dr Sanjana Mehta: If I may expand on that, we have been consulting our members and the wider community, and 58% of our respondents in the UK say that they still have critical and significant skills needs in their organisations. Nearly half of the respondents—47%—say that skills shortages are going to be one of the greatest hurdles in regulatory compliance. That is corroborated by evidence, even in the impact assessment that has been done on the previous regulatory regime, where I think nearly half of the operators of essential services said that they do not have access to skills in-house to support the regulatory requirements. Continuing to have sustained investment in skills development is definitely going to require funding. Taking it a step back, we need first of all to understand what sort of skills and expertise we have to develop to ensure that implementation of the Bill is successful.

[Alison Griffiths]

Q Returning to the supply chain risks, I want to ask you about the difference between OT—operational technology—and IT, and whether there is sufficient detail in the Bill to protect that. If you have intelligent electronic devices from single suppliers across multiple sectors, are we confident that there is sufficient detail about what the regulatory role is in saying that suppliers should be within scope? Is more detail needed in the Bill?

Stuart McKean: I am not an expert on the detail, but I would say that there is currently very little detail in the Bill regarding IT and OT.

Employment Rights Bill

Debate between Alison Griffiths and Sarah Russell

Report stage
Wednesday 12th March 2025 Commons Chamber

[Alison Griffiths]

I think the hon. Lady possibly misrepresents the intent of Opposition Members. We are not anti-trade union; we are anti the drafting of this Bill. I think it is important to make a clear distinction between the two.

[Mrs Russell]

I thank the hon. Lady for her point, but I think it is a very difficult distinction to make: that they are pro-trade union but anti things that make it easier for trade unions to effectively represent workers.

To return to my point, access to trade unions means access to good-quality advice, quicker resolution of disputes and a reduction in unrepresented litigants in person, which, in my experience, can make life genuinely difficult for well-meaning employers. Every single thing in this Bill will be good for workers, but it will also be good for employers, and I will be very pleased to vote for it later today.

“Chapter 4A

Debate between Alison Griffiths and Sarah Russell

Tuesday 11th March 2025 Commons Chamber

[Alison Griffiths]

I refer the hon. Member first to my earlier comments about ensuring that we do not disincentivise employers, and secondly to the flexibility that is needed for both employers and employees.

Amendment 288 seeks to exclude hospitality providers and sports venues from those provisions, recognising the impracticality of holding employers accountable for every interaction in those environments. It is simply not practical to think that every publican, landlord and bar owner—small business owners—would be liable for any harassment that happens towards their employees in a pub, bar, nightclub or festival. Amendment 285 would require an impact assessment to be carried out on clause 18. Of course businesses and business owners should embed good working practices and guidelines to combat this abhorrent behaviour, but it is impractical and undesirable for the Government to legislate nationally for every sector and business.

[Mrs Russell]

The hon. Lady will appreciate that there is a defence here if an employer has taken all reasonable steps. It is only reasonable steps.

[Alison Griffiths]

I am sorry; I think we have made enough progress.

I urge the Government to reconsider, to withdraw the Bill and to work with businesses, unions and workers to create a fair and balanced approach that prioritises the political interests—