ANDY BURNHAM REAPPOINTS LIZ LLOYD AS SHE PREPARES TO RETAIN UK CYBERSECURITY PORTFOLIO FOLLOWING GOVERNMENT DEPARTMENT BREAKUP

LONDON — British Prime Minister Andy Burnham has reappointed cybersecurity minister Liz Lloyd to a government position, positioning her to continue leading the United Kingdom’s cyber policy during a wider ministerial reorganization that eliminated the department previously responsible for overseeing it.

Lloyd was appointed late Thursday to a junior ministerial position within the Department for Digital, Culture, Media and Sport. She will also retain a second position at the renamed Department for Business, Innovation, Science and Trade.

Her formal portfolio has not been publicly announced, but Whitehall sources indicated that she will resume responsibility for the government’s cybersecurity agenda. Lloyd has led the cyber brief since September 2025 and has been responsible for advancing the Cyber Security and Resilience Bill through Parliament.

Her continued involvement provides a degree of policy stability as the government redistributes cyber, digital, science and artificial intelligence responsibilities across multiple departments.

Burnham’s early appointments removed several political allies of former Prime Minister Keir Starmer while elevating figures associated with the leadership change that ended Starmer’s government. Lloyd represents a notable exception because of her previous proximity to Starmer and her former position as his director of policy delivery.

Lloyd does not hold an elected seat in the House of Commons. She serves in Parliament’s appointed upper chamber as Baroness Lloyd of Effra, allowing her to continue guiding the cybersecurity legislation through the House of Lords.

The Cyber Security and Resilience Bill cleared its second reading in the Lords earlier in July with support across party lines. Detailed examination of the legislation is scheduled to begin in September, when members will review its provisions and consider amendments.

Replacing the minister shortly before that process could have required a successor to master a technically complex bill within approximately six weeks. Lloyd’s reappointment reduces that risk and supports the government’s objective of passing the legislation before the end of 2026.

The bill represents the most substantial proposed revision of Britain’s cybersecurity regulations in years. It would update rules dating from 2018, expand the number and type of organizations subject to cyber requirements and provide ministers with broader authority to amend regulations as threats and technologies change.

Data centers and managed service providers would be brought into the regulatory framework. Their inclusion reflects the central role those organizations play in hosting information, maintaining systems and providing digital services used across government, healthcare and private industry.

A compromise affecting a managed service provider can extend into multiple customer networks because the provider may hold administrative access, security responsibilities or system-management privileges across numerous organizations. A disruption involving a major data center can affect multiple services that depend on the same physical and digital infrastructure.

The legislation would also establish incident-reporting deadlines for operators of essential services, including organizations supporting energy, water and healthcare. Timely reporting is intended to provide authorities with a clearer understanding of attacks that may affect critical services and allow warnings or defensive information to be shared across affected sectors.

Ministers would receive authority to issue directions to regulated companies on national-security grounds. That power could allow the government to require specific action when a cyber incident or vulnerability creates risks extending beyond one organization.

The extent of those powers and the safeguards governing their use are expected to receive further scrutiny during the House of Lords committee stage. Parliament will need to consider how rapidly the government should be able to respond to a serious threat while maintaining clear limits, accountability and operational practicality.

Lloyd was also the responsible minister when the previous government reduced proposed security measures for telecommunications networks that had been developed following the Salt Typhoon espionage campaign. Telecommunications companies had challenged parts of the proposal on cost and implementation grounds.

That earlier decision illustrates one of the continuing difficulties facing the government’s cybersecurity policy. Stronger requirements may reduce exposure to state-backed espionage and criminal attacks, but regulated companies can face substantial expenses when replacing equipment, restructuring networks or meeting accelerated compliance deadlines.

Burnham was invited by King Charles III to form a government on Monday following Starmer’s resignation after a Labour Party leadership election. One of Burnham’s first structural changes was the dissolution of the Department for Science, Innovation and Technology, which had overseen national cyber policy since 2023.

The former department’s responsibilities were divided among three areas of government. Cyber policy and government digital services were transferred to the Department for Digital, Culture, Media and Sport. Science policy moved to the Department for Business, Innovation, Science and Trade. Artificial intelligence policy and the AI Security Institute were placed within the Cabinet Office.

The reorganization separates artificial intelligence security work from the main cybersecurity portfolio for the first time. That division creates distinct lines of ministerial responsibility for areas that can overlap in practice.

Artificial intelligence can affect defensive monitoring, vulnerability analysis, automated attacks, fraud, misinformation, software development and the security of public services. Cyber operations can also target the infrastructure, models and datasets supporting AI systems. Dividing the two portfolios will require formal coordination to prevent information or responsibility from becoming fragmented across departments.

Industry representatives warned that dissolving the Department for Science, Innovation and Technology could weaken the integration of data, digital capability, cybersecurity and artificial intelligence that had been one of the department’s principal strengths.

The transfer places cyber policy inside a department also responsible for major cultural and regulatory matters, including online safety and the renewal of the BBC Charter. Those responsibilities will compete for ministerial attention as the government attempts to complete the Cyber Security and Resilience Bill and publish its delayed national strategy.

Whitehall sources expressed confidence in Susannah Storey, the permanent secretary at the Department for Digital, Culture, Media and Sport, citing her experience with cybersecurity issues. Senior civil-service experience can preserve administrative continuity, but the department will still require sustained political direction as it absorbs personnel and responsibilities from the former technology department.

Lloyd has promised to publish a National Cyber Action Plan during the summer. The plan is expected to outline the government’s strategy for protecting the wider British economy from state-supported operations and financially motivated cybercrime.

Publication had been expected earlier in July but was delayed following Starmer’s resignation. Lloyd’s return to the cyber portfolio provides a direct path for completing the strategy without transferring the unfinished work to a new minister.

The action plan and the Cyber Security and Resilience Bill serve different functions. The legislation would establish enforceable regulatory obligations and government powers. The action plan is expected to define broader national priorities, coordination and defensive objectives across the economy.

“Cybersecurity is an essential part of our daily lives, which is why we are taking robust action to protect the UK from cyber threats and improve cyber resilience across the economy,” a government spokesperson said. “Our Cyber Security and Resilience Bill will boost UK cyber defences and improve the cyber security of our essential public and digital services.”

“The functions of the former Department for Science, Innovation and Technology have been redistributed to where they can have the most direct impact,” the spokesperson added. “This move recognises that technology is not a separate facet of our economy—it is the foundation of all future industry, culture, and public service delivery.”

Lloyd’s reappointment signals continuity in the government’s immediate cyber agenda, particularly the passage of the Cyber Security and Resilience Bill and completion of the National Cyber Action Plan.

The larger institutional structure has changed substantially. Cybersecurity, government digital services, science and artificial intelligence policy will now operate under separate departmental leadership. The effectiveness of Burnham’s reorganization will depend on whether those departments can maintain shared priorities, exchange threat information and avoid gaps in authority as the United Kingdom confronts cyber activity affecting essential services, telecommunications networks, government systems and the wider economy.

🔥 NOW AVAILABLE! 🔥

‎👉 Eclipsera – Apple Music

Sponsored • TRJ Ads
Inquiries: contact@therealistjuggernaut.com

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE