Strategy
KPMG partnered with the UK Government to design its first system-wide cyber action plan translating national cyber strategy into a clear, deliverable blueprint for protecting public services at scale.
The UK faces an increasingly complex cyber and digital resilience challenge. Legacy technology, fragmented accountability and growing cyber threats have left public services and critical national infrastructure exposed to unacceptable levels of risk. While the Government Cyber Security Strategy set out a clear ambition for improvement, there was no agreed way to deliver it across a highly federated public sector.
Working in close partnership with the Department for Science, Innovation and Technology, KPMG helped address this challenge by designing the UK Government’s first cyber action plan. The project created a single, system-wide blueprint for how cyber resilience will be governed, delivered and continuously improved across central government, 250+ arm’s length bodies, the NHS and the wider public sector.
This was the first time the UK Government had attempted to design a target operating model (TOM) and delivery plan at this scale. The TOM brings clarity to roles and responsibilities, strengthens accountability at senior leadership level, and enables a more coordinated response to cyber risks that cannot be managed by individual organisations acting alone. It also supports better value for money by defining shared services and common standards across government.
Alongside the TOM design, KPMG supported urgent responses to critical cyber risks and helped shape a costed delivery plan to 2030. The work directly informed HM Treasury Spending Review submissions, influencing around £1 billion of cyber investment in FY2025/26 alone.
The result is a step change in how government understands and manages cyber risk. With clearer accountability, improved coordination and a unified approach to incident response, the Government is now better equipped to protect public services and strengthen national resilience for the long term.
View the profile in the MCA Members Directory.