Cyber Security and Resilience (Network and Information Systems) Bill (Seventh sitting)

Debate between David Chadwick and Lincoln Jopp

Committee stage
Tuesday 24th February 2026 Public Bill Committees

[Lincoln Jopp]

Will the hon. Member give way?

[David Chadwick]

I will.

--- Later in debate ---

[Lincoln Jopp]

I am a little confused—which is easily done, I hasten to add. The new clause says:

“The management body may be held accountable for failures by the body to comply with duties relating to the security and resilience of its network and information systems.”

Does the hon. Member not think that the directors of companies are already responsible and accountable for their companies? Why does the state need to tell them more about those responsibilities?

[David Chadwick]

I think this once more comes down to state capacity and how we see the state’s role. Clearly there needs to be an expansion of the state’s powers—that is why the Bill was introduced—to mandate in writing various requirements of the companies that provide the critical infrastructure upon which our country relies. The hon. Member will remember the numerous witnesses who told us that board accountability was crucial. Some told us that in public and some in private. They are the people who are doing this job, and whom the Government are asking to do this job. That is why we should listen to them and why we will press the new clauses to a vote.