Question to the Department for Business, Innovation, Science and Trade:

To ask the Secretary of State for Business and Trade, what assessment he has made of the risk of cyber-security breaches affecting personal data collected through the Companies House identity verification regime.

Companies House has assessed the cyber security risks associated with the identity verification process as part of its wider risk management framework. Any consequences to the agency's exposure to cyber threats and data risks resulting from the introduction of identity verification are actively managed through a robust risk management framework and appropriate security controls including annual assessments as part of the Cabinet Office Departmental Security Health Check (DSHC).

Companies House's digital infrastructure is continually monitored and assessed via a dedicated Security Operations Centre, supplemented by penetration testing of services and infrastructure, suitable supplier assurance, and certification to ISO 27001.