Question to the Ministry of Housing, Communities and Local Government:

To ask His Majesty's Government what advice they provide to local authorities on taking out insurance for potential cyber attacks.

The Government Cyber Security Strategy sets a clear target for all public bodies to be resilient to known vulnerabilities and common attack methods by 2030. Cyber insurance should be considered as part of wider cyber security resilience measures taken by organisations. The NCSC (The National Cyber Security Centre) has provided helpful guidance for organisations thinking about taking out cyber insurance.

In 2024 MHCLG introduced the Cyber Assessment Framework for local government to help councils assess and improve their cyber security. The framework also aims to promote good cyber security practices and cultures within councils to minimise the impact of cyber-attacks.