DNS focus helps Government reduce cyber vulnerabilities

The Government has reduced the time taken to fix critical cyber vulnerabilities in public sector systems by 84%, cutting the average resolution time from nearly two months to just over a week.

The improvement follows the introduction of a specialist Vulnerability Monitoring Service, which continuously scans around 6,000 public sector organisations for cyber weaknesses. The service, launched as part of the government’s Blueprint for Modern Digital Government in January 2025, has also reduced the backlog of unresolved cyber security issues by 75%. It detects around 1,000 different types of vulnerabilities each month, providing organisations with clear guidance on how to resolve them.

"The Vulnerability Monitoring Service has transformed how quickly we can spot and fix weaknesses before they’re exploited," said Digital Government Minister Ian Murray. "We’ve cut cyber-attack fix times by 84% and reduced the backlog of critical issues by three quarters."

The service focuses on Domain Name System (DNS) vulnerabilities, which can allow attackers to redirect users to fraudulent sites, steal data, or take services offline. Before the monitoring service was introduced, such weaknesses could go unnoticed for nearly two months, leaving public services exposed to potential exploitation.

To further strengthen cyber defences, the government is launching a new Government Cyber Profession, designed to attract and develop skilled cyber security experts. The initiative, co-branded with the Department for Science, Innovation and Technology and the National Cyber Security Centre, will include a dedicated Cyber Resourcing Hub, a Government Cyber Academy for training, and structured career pathways.

"Cyber security is more consequential than ever today, with attacks showing the profound impacts they can have on people’s everyday lives,” said Dr Richard Horne, CEO of the National Cyber Security Centre . “The Government Cyber Action Plan is a crucial step in building stronger cyber defences across our public services."

The new profession will be based primarily in the North West, building on Manchester’s growing digital ecosystem and the forthcoming Government Digital Campus. The programme aims to create a competitive employment offer, align career frameworks with UK Cyber Security Council standards, and introduce apprenticeship schemes to develop future talent.

The £210 million investment forms part of the Government Cyber Action Plan, which addresses the severe and advancing cyber threats identified in the National Audit Office’s January 2025 report. The report highlighted skills gaps as the biggest risk to building cyber resilience in the public sector.