The Department for Science, Innovation and Technology (DSIT), in conjunction with the National Cyber Security Centre (NCSC), Cabinet Office, HM Treasury, the National Crime Agency and the Department for Business and Trade, has published a joint ministerial letter on cyber security addressed to all FTSE100 and FTSE250 companies, as well as other leading UK firms. The letter sets out three key actions for large businesses to strengthen their cyber resilience: (1) making cyber risk a board-level priority by using the Cyber Governance Code of Practice; (2) registering for the NCSC's Early Warning service, which alerts organisations to potential cyber attacks targeting their networks; and (3) requiring Cyber Essentials certification across supply chains. The correspondence comes in response to increased hostile cyber activity targeting the UK, which has caused both financial and social harm to businesses and citizens.

The Department for Science, Innovation and Technology (DSIT) released results on 5 March 2025 from a pilot of its new Cyber Governance Code of Practice. The code, tested over five weeks in 2024 by Arculus Cyber Security, aims to establish standards for board-level cyber risk management across UK businesses. The pilot report forms part of the government's broader cyber resilience strategy and outlines implementation guidance for company directors on managing cyber risks as principal business risks.

The Department for Science, Innovation and Technology (DSIT) has published a press release stating that 11 start-ups working on chips have joined a government-backed chip support service that has helped semiconductor start-ups raise over £10m of funding from private investors and grants, with a total of nearly £20m in commitments. The support service provides backing for semiconductor start-ups working on chips that make AI more efficient and create new lifesaving healthcare tech through ChipStart, a pilot incubator launched in October 2023 to help start-ups bring new products to market. On completion, the pilot will provide the UK’s semiconductor industry with new start-ups with an innovative product, route to market, and are a foundation for future growth, including routes to future seed funding.

The Department for Science, Innovation and Technology (DSIT) Secretary of State has issued a guidance about determining fees payable by regulated services under the Online Safety Act 2023 (OSA 2023) to Ofcom. The OSA 2023 brings new laws to protect users and tackle criminal activity online, and Ofcom has been provided authority to deliver a strong regulatory framework to improve regulated services safety for users.

The Department for Science, Innovation and Technology (DSIT), the Department for Culture, Media and Sport and the Intellectual Property Office have jointly published a report and an impact assessment examining the use of copyright works in the development of artificial intelligence systems which have been released under sections 135 and 136 of the Data (Use and Access) Act 2025 (DUAA 2025).

The Department for Science, Innovation and Technology (DSIT) has published a report containing the findings of a survey it commissioned to understand how businesses in key sectors use Artificial Intelligence (AI) and how businesses implement cyber security practices and processes around the AI technology they deploy. The research found that, among other things, 68% of the businesses that were surveyed were currently using at least one AI technology, while 32% had plans to adopt AI in the future. Of the businesses currently using AI, 64% were deploying one type of AI technology, 22% were using two types of AI and 14% were using three or more. The research also showed that nearly half of those businesses that are currently using AI have no specific cyber security practices in place.

The Department for Science, Innovation and Technology (DSIT) has published research examining the evolving cyber threat facing English local councils and its potential impact on digital infrastructure and services. The study investigates how weaknesses in digital systems can place sensitive data and the continuity of local services at risk, drawing on desktop research and direct engagement with councils.

The Department for Science, Innovation and Technology has published its response to the call for views on a Cyber Governance Code of Practice, aimed at enhancing cyber resilience in businesses. DSIT has committed to releasing the full Code in early 2025, addressing feedback received during the consultation. Concurrently, the department has introduced a world-first AI cyber security standard to protect AI systems from cyber-attacks, supporting the government's Plan for Change. DSIT has also spearheaded the launch of an International Coalition on Cyber Security Workforces to address the global cyber skills gap and strengthen international cooperation on cyber security.

The Department for Science, Innovation and Technology (DSIT) has published its response to the consultation on the Code of Practice for Software Vendors, which ran from May 2024 to August 2024. The consultation received 87 responses, showing strong support (81%) for government guidance on software security. DSIT will revise and publish the final code in 2025, incorporating feedback that favoured mandatory provisions over recommended ones. The code will be accompanied by technical controls, implementation guidance, and an assurance regime based on the National Cyber Security Centre's Principles Based Assurance approach. The voluntary code aims to establish baseline security measures for organisations developing and selling software to business customers, addressing concerns about software supply chain attacks that have affected 59% of organisations globally.

The Department for Science, Innovation and Technology (DSIT) has published its response to the call for views on the cyber security of artificial intelligence (AI). The response outlines strong support for the proposed two-part intervention: a voluntary Code of Practice and development of a global standard. DSIT has updated the Code based on feedback, including adding a new principle on end of life and updating stakeholder groups. An implementation guide has been created to support organisations, particularly SMEs, in adopting the Code. The government will now take the updated Code and guide to the European Telecommunications Standards Institute (ETSI) to develop a new global standard for AI cyber security.

The Department for Science, Innovation and Technology (DSIT) has published its response to the consultation on proposed updates to the Telecommunications Security Code of Practice 2022, confirming that it will revise the Code to reflect emerging cyber threats, technological developments and industry feedback. The updated draft Code will be laid before Parliament in due course. DSIT says the changes are intended to strengthen the security and resilience of UK public telecommunications networks and services while providing clearer and more detailed guidance for providers.

The Department for Science, Innovation and Technology (DSIT) has published its response to the consultation on proposed changes to the data protection fee regime. The consultation, which closed on 3 October 2024, sought views on increasing fees payable by data controllers to the Information Commissioner's Office (ICO) by 37.2% across all tiers. DSIT's response outlines stakeholder feedback on the fee increase proposal, as well as on the continued suitability of other aspects of the regime, including fee determination criteria, Direct Debit discounts, and current exemptions from payment requirements.