The Cyber Security Bill is in Lords Committee stage

Northstar is a UK-wide infrastructure and consumer services business, so parts of its operations or suppliers may fall within the Bill’s scope. It could create new cyber-security, incident-reporting, governance, assurance or compliance obligations, with potential cost and implementation implications. The Bill is at an active parliamentary stage, but the supplied text does not yet establish Northstar’s precise coverage or the substance of proposed amendments. Recommended actions: 1. Create a Cyber Security & Resilience issue and assign an internal owner with input from legal, compliance, IT/security and relevant operational teams. 2. Conduct a rapid applicability scan against Northstar’s essential activities, regulated services, critical suppliers and existing NIS Regulations obligations. 3. Review the Bill text and forthcoming Lords Committee proceedings, focusing on scope, duties, enforcement, reporting requirements, supplier obligations and implementation periods. 4. Prepare a short internal briefing identifying likely operational impacts, existing organisational positions and any provisions that may warrant parliamentary engagement. 5. Track the Lords Committee sittings on 1, 3, 7 and 9 September 2026 and capture relevant amendments, Government responses and evidence of implementation timing.