Why cyber resilience is industrial resilience

National resilience in the UK increasingly depends not just on physical infrastructure and manufacturing capability, but on the security and sovereignty of its digital foundations. The National Preparedness Commission's new report, Industrial Resilience: Assessing the Foundations of UK Industry, comes at a crucial moment – warning that the systems underpinning our economy and security are only as strong as the industrial and technological ecosystems behind them and we hope that government takes note of the report.

For cybersecurity professionals, this is a familiar message. Every network, from energy grids to transport systems, is now part of a vast cyber-physical landscape. A single weak point – in hardware, software, or skills – can ripple across entire sectors. As the UK looks to rebuild its industrial strength, it must therefore also rebuild its cyber resilience: ensuring that the technology, supply chains and expertise that secure national life are anchored on home soil.

Cyber Resilience Begins with Industrial Capability

Britain's industrial base has always been interconnected with its national security. During the 20th century, industrial capability provided the foundation for wartime resilience – enabling the rapid production of energy systems, communications networks, and defence engineering.

Today, the same logic applies, but the tools have changed. The new battleground is digital as well as physical. Industrial resilience now depends on secure data, trusted technology, and cyber-robust systems that can operate independently even when global supply chains falter.

The NPC report highlights how gaps in materials manufacturing, electronics and energy leave the UK exposed. But just as critically, weaknesses in digital infrastructure – from insecure operational technology to foreign software dependencies – pose risks that transcend traditional borders. Building resilience therefore means integrating cybersecurity into every level of industrial strategy, from the design of critical infrastructure to the protection of industrial control systems and emerging technologies like AI and quantum computing.

The Real Battleground for Security: Talent

Without question, the UK's future defence and resilience will be powered by AI, quantum computing, robotics and autonomous systems. But the true gap we face isn't in hardware – it's in skills.

If Britain wants to defend itself in a rapidly shifting geopolitical and technological landscape, it must start with STEM skills. These disciplines underpin everything from cryptography and secure communications to the design of resilient networks and AI-driven decision systems.

Right now, the UK doesn't have enough people with the right expertise in the right places to realise this vision. Cyber defence, quantum technologies, and autonomous systems all demand a deeper and broader pipeline of technical capability – not just among elite researchers and engineers, but across every part of the workforce that will need to understand, deploy and govern them.

We are living through a period of immense technological transformation. Defence and civil infrastructure are being redefined by digital capability: software-defined systems, interconnected sensors, AI-driven analytics, and hybrid cyber-physical environments. Whether it's securing military communications, managing drone threats, or defending against deepfakes, the common denominator is the same – a deeper reliance on technology, and on the people who can make it secure.

This makes investment in home-grown STEM talent not just an economic priority, but a sovereign necessity.

From Policy to Practise: Closing the STEM Skills Gap

While long-term education reform is vital, it is only part of the story. The UK must rethink how it approaches skills development – creating accessible, lifelong pathways into technical roles, from apprenticeships and vocational training to mid-career transitions.

Equally important is making STEM aspirational and inclusive. Scientific literacy must extend beyond the defence and tech sectors into every part of society. And achieving that requires collaboration between government, industry and education – turning STEM into a national mission as critical as any procurement programme or diplomatic initiative.

Across the UK, there are already promising examples of this approach. In Belfast, Crawley, Glasgow, Bristol and South Wales, partnerships between industry and academia are giving students hands-on experience in emerging technologies.

Apprenticeships are training the next generation of systems engineers, while outreach programmes are inspiring girls and underrepresented groups to see cybersecurity as a future they can shape.

These initiatives rarely make front-page news, but they are vital to national resilience. They are building the skills base on which the UK's security, prosperity, and technological sovereignty depend.

Innovating Our Way to Resilience

The NPC report warns that the transition to Net Zero, combined with fragile global supply chains, could create new dependencies if not managed carefully. But resilience and innovation are not mutually exclusive. The ongoing work to digitise our energy grid will help make decarbonisation efforts more efficient – but it is crucial that the right investment is made in secure, sovereign technologies to make this happen successfully. Whether it's quantum-safe communications, through to cyber-resilient control systems, the UK must have robust defence measures in place to both decarbonise and defend.

Emerging technologies such as AI and quantum computing are already transforming how the UK detects, responds to, and recovers from threats. But to harness them safely, we need a workforce equipped to understand and govern them. Innovation without capability risks fragility; innovation built on secure foundations creates resilience.

A Shared Mission for a Resilient Future

The Industrial Resilience report is ultimately a blueprint for action. It calls for long-term collaboration to rebuild the industrial and technological foundations of resilience – including a Critical Materials Manufacturing Strategy to reinforce essential capabilities.

But resilience isn't built through policy alone. It is forged through partnership – between government vision and investment, industrial capability, and the skills and technologies that connect them.

In the end, it's not just about protecting infrastructure or defending data. It's about equipping people to anticipate, understand and counter the threats of tomorrow. Because in this new era of competition, skills are not just a strategic asset – they are the nation's first and strongest line of defence.