The UK Department for Science, Innovation and Technology had not committed as of October 2026 to including AI-specific reporting measures in the Cyber Security and Resilience Bill.