Question

To ask the Secretary of State for Digital, Culture, Media and Sport, who the senior responsible owner is for migration of government systems to post-quantum cryptography; in which department that post sits; and what budget has been allocated to that programme in the financial year 2026-27.

The UK Government does not currently operate a centrally funded programme to migrate all government systems to post-quantum cryptography (PQC). Responsibility for planning, funding and implementing PQC migration plans rests with individual departments, as they manage their own technology estates, cyber risks and funding (including for 2026-27).

Work on PQC migration is delivered alongside broader improvements to Government cyber resilience under the Government Cyber Action Plan, which illustrates departmental responsibilities. The Government Cyber Unit, which moved to the new Department for Digital, Culture, Media and Sport in July 2026, is developing a suite of guidance to support departments with their migration planning. The guidance follows timelines set out by the National Cyber Security Centre (NCSC) to complete planning by 2027, migrate high-priority systems by 2031 and all remaining systems by 2035.