Question

To ask the Secretary of State for Digital, Culture, Media and Sport, by what instrument the milestones in the National Cyber Security Centre's guidance Timelines for migration to post-quantum cryptography of 20 March 2025 are given effect for government departments and arm's length bodies.

The Government Cyber Action Plan (GCAP), published in 2026, sets out the responsibilities for improving cyber resilience within Government departments and arm's length bodies. Under the GCAP, Accounting Officers are accountable for ensuring their organisations meet agreed cyber resilience outcomes, including for the transition to post-quantum cryptography. The Government Cyber Unit is developing a suite of guidance to support departments' migration planning, in line with NCSC timelines, and a performance framework to monitor progress against GCAP outcomes across government, strengthening accountability for delivery.