Written Question·Cabinet Office·UIN 95497

Cybersecurity: Public Sector

Tabled: 28 November 2025
Answered: 9 December 2025

Question

Callum Anderson

LabourBuckingham and Bletchley

To ask the Minister for the Cabinet Office, what criteria are used by his Department to determine which public systems require mandatory zero-trust security measures.

Answer

Dan Jarvis
The Department applies a risk-based assessment framework, underpinned by secure by design methodology including structured threat modelling, to determine which public systems require mandatory zero-trust security measures. Systems handling sensitive data,...

This is an extract from the Parliament API. Search the full answer on Parliament.uk (UIN 95497) →