Select committee: Public Accounts Committee
Recommendation 21
41st Report - UK Research and Innovation
Published 23 Jul 2025
Addressed to HM Treasury
Public Accounts Committee UK Research and Innovation All items in this report Report on parliament.uk ↗ Inquiry on parliament.uk ↗
Recommendation (the committee's words)
As we have reported before, one of the most serious risks to all parts of Government and industry is large-scale-assaults on their cyber security defences and ensuring their resilience against such attacks. Outdated legacy systems, such as those at UKRI, increase the cyber risk to government.53 UKRI told us it takes cyber seriously and its updated systems have been designed with “cyber in mind from the beginning”, and that it runs continual cyber and phishing awareness training with staff.54 46 Q 20 47 C&AG’s Report, para 1.28 48 C&AG’s Report, para 1.29 49 Q 41 50 Qq 41-42 51 Q 43, C&AG’s Report, para 1.28 52 Q 54 53 Committee of Public Accounts, Government cyber resilience, Twenty-Fourth Report of Session 2024–25, HC 643, May 2025 54 Q 57 14 3 Risk and reward Portfolio approach to risk management
From: Public Accounts Committee, 41st Report - UK Research and Innovation (HC 826), 23 July 2025
Government response
Latest Treasury Minutes progress report to the Committee of Public Accounts on the Forty-first Report of Session 2024-26
The government responded to the whole report on 4 June 2026 (deadline 23 September 2025).
Treasury minutes: Government response to the Committee of Public Accounts on the Forty-first report from Session 2024-26
Published 15 October 2025.
Summary written by Accountability Index from the government's response. It is not the government's own words.The government states that it agrees with each of the Committee's recommendations on UKRI's priorities, objectives, data, IT systems, risk and scaling innovation, with target dates between Autumn 2025 and Summer 2026.
- On objectives, DSIT is developing strategic objectives for UKRI underpinned by measurable key results, and will publish them "by Autumn 2025".
- On data visibility, UKRI is developing a new online portal to replace Gateway to Research, "currently planned to be launched in Summer 2026", and will report to the Committee on progress in February 2026.
- On risk, UKRI will incorporate the NAO's recommendations into its 2025 review of its risk appetite statement, "to be completed by February 2026" and "closely monitored by DSIT".
- On scaling innovation, the impact of the new Proof-of-Concept funding "will only be possible" to understand after the first rounds conclude and are evaluated, with evaluation dates "not yet confirmed".