iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
On 22 April 2026, Security Minister Dan Jarvis called on leading AI companies to work with the UK Government to co-develop AI for national cyber defence. The announcement set out a proposed direction, not a finished system: it did not name participating firms, specify a technical design or set out a formal agenda. Separately, the government announced £90 million of further cyber-resilience investment over three years and later launched a Cyber Resilience Pledge for businesses.
What did the minister ask AI companies to do?
At CYBERUK 2026, Jarvis asked frontier AI firms to collaborate directly with government on AI for national cyber defence. His speech put the request plainly: “Partner with the UK Government to co-develop AI for national cyber defence.” The proposal was framed as more than buying standard enterprise software; it called for government and AI companies to develop capabilities together.
Jarvis argued that AI could help attackers find vulnerabilities and automate attacks, while government and technology firms bring complementary capabilities to the defensive effort. Those points describe the minister’s case for collaboration, rather than an independently demonstrated assessment of how much AI has changed the threat. His speech also said the NCSC had handled over 200 nationally significant incidents in the preceding year; that is the speech’s own time reference, not a defined reporting period. Read the CYBERUK speech.
Free tools Windows power users keep installed
One-click scans. No signup required.
Is a UK AI cyber-defence system already being built?
The April announcement described groundwork for a possible national capability and said the government would set out a formal agenda in due course. It did not establish that a national system had been completed or deployed, that a commercial partnership had been signed, or that any named AI company had agreed to participate. It also gave no technical architecture, delivery milestones or detailed funding allocation for such a capability. The distinction matters: a call to collaborate is not the same as a functioning public service.
#1 Best Overall
Ofcom later opened its own engagement on AI’s role in cyber defence, focused on critical communications. That is a separate regulatory engagement, not evidence that the government’s proposed national capability has been delivered. Ofcom’s announcement was published in September 2026.
What does the £90 million investment cover?
The Cabinet Office said the government would provide a further £90 million over three years to strengthen cyber resilience, including for small and medium-sized businesses. The money was to flow through existing Department for Science, Innovation and Technology (DSIT) and National Cyber Security Centre (NCSC) schemes. The announcement did not break the sum down by scheme, business size, technology or recipient, so it should not be read as a published grant allocation for individual firms or as the budget for the proposed AI capability. The April announcement sets out the investment alongside the call to AI firms.
What is the Cyber Resilience Pledge?
The pledge was announced in April as part of the planned National Cyber Action Plan and launched on 7 July 2026. It is aimed at practical organisational resilience, rather than development of a government AI system. The government described actions for participating businesses that include:
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errors- Giving cyber security oversight at board level.
- Making use of NCSC tools.
- Strengthening security across supply chains.
The pledge release concerns business practices; it does not announce the technical design or partners for the separate national AI-defence proposal. The July launch announcement describes the pledge and its actions.
Rank #3
How should the UK cyber-security figures be read?
Government releases published in 2026 include figures about incidents, businesses and the cyber-security sector. They measure different things and should not be combined into one measure of the threat:
- Over 200 incidents: Jarvis’s April CYBERUK speech said the NCSC handled over 200 nationally significant incidents in the preceding year. The speech did not define that period more precisely.
- 43% of businesses: A May DSIT release reported that 43% of UK businesses had experienced a cyber breach or attack in the past year. This is the release’s recent figure, not a timeless rate.
- £14.7 billion in sector revenue: The same May release cited £14.7 billion in UK cyber-security sector revenue. This is industry revenue, not an estimate of losses caused by cyber attacks.
The figures come from separate statements and have different populations and definitions. In particular, the £14.7 billion revenue figure should not be confused with a separate annual economic-cost estimate mentioned in the July pledge release, which attributes that estimate to independent research and uses a different scope. The May DSIT release provides the business and sector figures.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What should businesses take from the announcements?
For organisations, the pledge’s board oversight, NCSC tools and supply-chain security actions are the most concrete steps described in these announcements. They are distinct from the government’s longer-term proposal to co-develop national AI cyber-defence capabilities with AI firms. Jarvis also described basic cyber hygiene as a minimum expectation for organisations: “Basic cyber hygiene is no longer optional, but the baseline — the absolute minimum we should expect of any serious organisation operating in the modern economy.” The speech also states the government’s view that business cyber security is a national-security concern.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Quick Recap
Best Value
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
