VerbatimParliament, as it happens

Transport: Cybersecurity

Asked by David ReedConservativeDepartment for TransportTabled Answered 2 September 2026UIN 19752

The question

To ask the Secretary of State for Transport, pursuant to the answer of 15 July 2026 to question 17243, what the threshold is for transport operators to report cyber security incidents involving them.

Answered by Department for Transport

Mandatory thresholds for reporting cyber security incidents under the Network & Information Systems Regulations 2018 can be found on gov.uk at the following link (Annex E, p42 onwards):

Implementation of the NIS directive: DfT guidance version 1.1 (https://assets.publishing.service.gov.uk/media/5ee3a21ae90e0704315ecf32/implementation-of-the-nis-directive-dft-guidance-document.pdf)

No thresholds are set for voluntary reporting outside of the regulatory requirements.

Verbatim has judged this answer against the question that was actually asked — answered, partly answered, or evaded. Sign in to see the verdict →

Open this question in Verbatim →

Every written question, searchable

155,000 questions tabled since the election, with the answer each department gave — and the ones still unanswered, with the clock running. Free to search.

Search written questions →Read on Verbatim