Cyber Security and Resilience (Network and Information Systems) Bill (Carry-over Extension)

Nusrat Ghani Excerpts

Carry-over motion
Wednesday 4th November 2026 Commons Chamber

[The Minister for Creative Industries, Media and Online Safety (Ian Murray)]

I beg to move,

That the period on the expiry of which proceedings on the Cyber Security and Resilience (Network and Information Systems) Bill shall lapse in pursuance of paragraph (13) of Standing Order No. 80A shall be extended, so that the period expires at the end of 29 April 2027 rather than at the end of 11 November 2026.

The UK is subject to daily and unrelenting cyber-attacks, as cyber-criminals and state-linked actors blackmail businesses, steal data and threaten our very way of life. As our lives become increasingly digital, the threat comes not only from hostile actors, but from weaknesses in the resilience of our systems. We must defend against both and focus our attention where it matters most.

Although all businesses should secure themselves against cyber-attack using the National Cyber Security Centre’s free toolkits, it is right that we do not over-regulate every business. That is why the Bill is targeted at our most essential and critical services, relating to drinking water, health, transport, energy and the digital services that keep our economy running. If these services were disrupted, we would have nowhere else to turn. The Bill safeguards those services and, in turn, protects the individuals and businesses that rely on them. That is the priority of this Government.

We will not hesitate to take action when hostile actors seek to do us harm. The Bill delivers a step change in national security and equips the Government with the powers to act decisively on threat intelligence. This Government have gone further still; we have tabled amendments to introduce a new vendor risk management framework, which will assist businesses in reviewing their supply chains and working with the Government to mitigate those risks, and it will, if necessary, enable Government to step in and instruct organisations to take action.

This week, the Bill re-entered the House after completing Third Reading in the other place on Monday 2 November. I pay tribute to the Minister, the noble Baroness Lloyd, as well as Members of this House and the other place for engaging so constructively throughout the Bill’s passage. In many instances, the contributions have refined the Bill and made it more robust. I know that hon. Members will continue this constructive dialogue in their consideration of Lords amendments, and will pass a Bill that is fit to deal with the cyber-threats that we face now and in future.

[Madam Deputy Speaker (Ms Nusrat Ghani)]

I call the Liberal Democrat spokesperson.