UK Government’s Cybersecurity Crisis: Critical IT Systems at “Extremely High” Risk
The UK government’s spending watchdog warns of cyber resilience gaps in critical IT systems, labeling the risk as “extremely high.” With a third of cybersecurity roles vacant and 28% of legacy systems red-rated, the National Audit Office urges urgent action to fill skills gaps and enhance cyber resilience.

Hot Take:
Well, it seems the UK government’s cybersecurity strategy is about as resilient as a wet paper bag in a hurricane. With more holes than Swiss cheese, it’s no wonder the National Audit Office is sounding the alarm. Maybe it’s time to put down the teacups and pick up some fire extinguishers because this cyber crisis is heating up faster than a kettle on full boil!
Key Points:
- The National Audit Office (NAO) has flagged significant cyber resilience gaps in UK government IT systems.
- The 2024 GovAssure assessment revealed 58 critical systems with “extremely high” risks.
- Legacy systems are omitted from current cyber resilience measures, creating a visibility gap.
- Cybersecurity roles in government are often unfilled or occupied by temporary staff.
- The NAO recommends urgent action, including a comprehensive cross-government cyber strategy.
Already a member? Log in here