This briefing examines the growing gap between modern telecommunications threats and the regulatory frameworks designed to oversee them. It explores infrastructure-layer harm, cross-domain attack activity, AI-driven telecom abuse, and the limitations of current oversight models, arguing for shared intelligence, standardised telemetry, and closer collaboration between regulators and operators to strengthen national communications resilience and accountability.

The UK Government Cyber Action Plan (2026) marks a decisive shift from advisory cyber policy to enforceable, cross-government governance. It introduces a central risk “spine” within DSIT, clarifies accountability for departments and suppliers, and reframes outages and attacks as equivalent resilience failures. This briefing assesses credibility, deliverability, skills and industry reliance, legislative dependencies, and the unanswered questions that will determine success.