Inquiry · 6 March 2025 → 29 April 2026
UK economic security
From: Business and Trade Sub-Committee on Economic Security, Arms and Export Controls
What this inquiry is asking
This inquiry examined whether the UK has an adequate strategic framework and toolkit to protect its economy from growing threats—including state actors weaponising economic interdependence, cyber-attacks on critical infrastructure, supply chain vulnerabilities, and foreign investment in sensitive sectors. It asked: does Britain have a coherent 'doctrine' for economic security, and if not, what should one look like?
Headline findings
- Committee concluded the UK's economic security regime is 'not fit for the future' and government machinery is 'disjointed and confusing', rejecting the Government's claim that existing policies already address identified risks.
- Identified ten distinct threat categories: state coercion, supply chain disruption, critical minerals vulnerability, cyber-attacks on critical infrastructure, ransomware (M&S £300m loss, Co-op attack in April 2025), foreign investment in critical sectors, software liability gaps, illicit finance, emerging tech risks, and people-focused threats.
- Government accepted only 4 of 25 recommendations. Committee rejected Government's rejection, stating that without a shared strategic framework, private sector cannot align investment and resilience planning with public sector objectives.
- Witnesses testified that threat actors (China's Volt Typhoon, Scattered Spider, Russian ransomware-as-a-service) are moving faster than UK defences; average time to penetrate organisations has shrunk from 10 hours to under 1 hour in five years.
- Critical gaps identified: NCSC awareness among businesses is 1%, cyber-crime pay lags private sector by £20-30k annually, no UK regulator has sanctioned firms for cyber-regulation breaches, and formal written definition of 'economic security' remains absent from Government policy.
Why it matters
Economic security underpins national security; Britain's adversaries are weaponising supply chains, technology, and capital flows while allies race to build resilience—without a coherent UK doctrine, British businesses cannot invest confidently and the state cannot defend critical vulnerabilities.
Tone arc
Inquiry opened cooperatively (May evidence sessions on critical minerals, supply chains, technology) but hardened progressively. By July cyber-attack sessions (M&S, Co-op, NCSC testimony), tone shifted critical of fragmented Government response and resource gaps. Final Government Response (January 2026) prompted sharp rejection from Committee, with Chair Liam Byrne stating the Cabinet's refusal to adopt a strategic framework represents a 'fundamental' fault.
Themes
Key witnesses
Pat McFadden MP (Chancellor of the Duchy of Lancaster), Douglas Alexander MP (International Business and Trade Minister), Ciaran Martin (former NCSC Director, RUSI), Archie Norman, Nick Folland, Victoria McKenzie-Gould (Marks & Spencer), Dominic Kendal-Ward, Rob Elsey (Co-op Group), James Babbage (NCSC), Richard Horne (NCA), Andrew Gould (NPCC), Mike King (lithium producer), John Lindberg (critical minerals analyst)
Outcome verdict
Government accepted 4 of 25 recommendations and rejected the Committee's core ask: adoption of a formal strategic framework diagnosing risks, identifying unacceptable dependencies, and coordinating whole-of-society response. Committee explicitly disagreed with Government's position that existing policies suffice.
Outcome
Responding to: 14th Report - Toward a new doctrine for economic security: Government Response
The government partially accepts the committee's concerns about economic security governance. It acknowledges the importance of the issue and accepts the framing around Protect/Promote/Partner principles (aligned with EU and allies), but rejects structural reforms: refuses to create a dedicated Minister or Office of Economic Security, will not publish sovereign capabilities list, rejects an Economic Security Bill, and defends existing departmental structures as appropriately balancing vertical and horizontal coordination. On specific areas, government commits to: more forthright communication via Economic Security Advisory Service; continued supply chain resilience work through new Supply Chain Centre; ambitious Critical Minerals Strategy with specific targets (10% domestic production, 20% recycling, max 60% single-country reliance); and market-led rather than legislated approach to Software Security Code of Practice adoption. Government argues current fiscal and incentive frameworks are adequate and rejects updating Managing Public Money rules.
Reports & Government Responses
Report · 4 February 2026 · HC 1666
14th Report - Toward a new doctrine for economic security: Government Response
Report · 24 November 2025 · HC 835
Witness sessions
Oral evidence · 7 May 2025 · HC 835
Session 1 of 11Oral evidence · 7 May 2025 · HC 835
Session 2 of 11Oral evidence · 7 May 2025 · HC 835
Session 3 of 11Oral evidence · 21 May 2025 · HC 835
Session 4 of 11Oral evidence · 21 May 2025 · HC 835
Session 5 of 11Oral evidence · 21 May 2025 · HC 835
Session 6 of 11Oral evidence · 8 July 2025 · HC 835
Session 7 of 11Oral evidence · 8 July 2025 · HC 835
Session 8 of 11Oral evidence · 8 July 2025 · HC 835
Session 9 of 11Marks and Spencer; Marks and Spencer; Marks and Spencer; +3 more
Oral evidence · 8 July 2025 · HC 835
Session 10 of 11Oral evidence · 9 July 2025 · HC 835
Session 11 of 11Department of Business and Trade; Rt Hon Pat McFadden MP; Rt Hon Mr Douglas Alexander MP; +2 more
Written evidence & correspondence
Correspondence · 12 November 2025
Correspondence · 31 October 2025
Correspondence · 28 October 2025
Correspondence · 15 October 2025
Correspondence · 15 October 2025
Correspondence · 2 October 2025
Correspondence · 26 September 2025
Correspondence · 25 September 2025
Correspondence · 24 September 2025
Correspondence · 24 September 2025
Letter from Tata relating to the impact of the cyber attack on Jaguar Land Rover, 23 September 2025
Correspondence · 22 September 2025
Letter from Jaguar Land Rover relating to the cyber attack on the company, 19 September 2025
Correspondence · 17 September 2025
Letter to Tata Motors on the impact of the cyber attack on Jaguar Land Rover, 17 September
Correspondence · 17 September 2025
Correspondence · 11 September 2025
Correspondence · 9 September 2025
Letter to Jaguar Land Rover relating to the cyber attack on the company, 9 September 2025
Correspondence · 2 September 2025
Correspondence · 2 September 2025
Correspondence · 2 September 2025
Letter to Lord Robertson relating to the Strategic Defence Review, 10 July 2025
Correspondence · 23 July 2025
Correspondence · 23 July 2025
Correspondence · 23 July 2025
Correspondence · 23 July 2025
Correspondence · 3 June 2025
Letter to Pool Re relating to the Sub-Committee's inquiry into UK economic security, 23 May 2025
Correspondence · 22 May 2025
Letter from the Coop relating to the cyber-attack against the business, 18 May 2025
Correspondence · 16 May 2025
Letter to Harrods relating to a request for their appearance at an evidence session, 16 May 2025
Correspondence · 16 May 2025
Letter to Co-op relating to a request for their appearance at an evidence session, 16 May 2025
Themes & actors
Topics across publication summaries
Top organisations & named entities
- Business and Trade Committee·11 references
- Jaguar Land Rover·9 references
- Liam Byrne MP·7 references
- Business and Trade Sub-Committee on Economic Security, Arms and Export Controls·6 references
- Secretary of State for Business and Trade·4 references
- Department for Business and Trade·4 references
- National Cyber Security Centre·3 references
- Jaguar Land Rover (JLR)·3 references
- Tata Motors·3 references
- Adrian Mardell·3 references
Source · parliament.uk inquiry record ↗