From AI adoption and critical infrastructure to industrial policy and economic growth, cyber security ran through many of the key debates at this autumn’s UK party conferences. While Labour, the Conservatives and Liberal Democrats brought different priorities to the table, common questions emerged around the UK’s technological capability, resilience and public trust.
Following party conference season, NCC Group’s Government Affairs Lead Louise Horton shares her reflections on the key themes shaping the political debate. Read on to explore what the discussions around digital sovereignty, AI adoption and government capability could mean for the UK’s cyber resilience, and for organisations navigating an increasingly complex technology landscape.
From AI ambition to cyber resilience: lessons from party conference season
"Cyber security ran through many of the key debates at this autumn’s UK party conferences, from AI and critical infrastructure, to industrial policy and growth. A wider question kept emerging: does the UK have the capability, resilience and public confidence to shape technological change?"
Who controls the technology? Cyber and AI through the conference lens
"The UK’s autumn party conferences give political parties an opportunity to sharpen their priorities, while providing businesses and civil society with a valuable window into the debates likely to shape the year ahead.
This year, NCC Group colleagues were present at Labour, Conservative and Liberal Democrat conferences, to understand how cyber security intersects with wider political priorities.
Across the conferences, cyber security did not always feature prominently in event titles. Yet it ran beneath discussions about AI adoption, critical infrastructure, industrial policy, procurement, economic growth, defence and national resilience. The recurring question across technology policy discussions was one of control and autonomy: who has control, where is autonomy constrained by critical dependencies, and what capability the UK needs to exercise control and autonomy effectively."
Digital sovereignty becomes practical
"Across the conferences, digital sovereignty was framed less as technological self-sufficiency and more as the ability to manage critical dependencies. Labour conference focussed on building domestic capability, alongside calls from industry for government to champion and build up British industry. There were similarly concerns about dependencies on foreign providers, and pragmatic proposals centred on control, resilience and trusted partnerships while strengthening UK capacity to defend, test and shape critical technologies.
A national-security lens at the Conservative conference meant the emphasis in discussions there was on defence, resilience and strategic autonomy and the importance of these for economic security.
While Liberal Democrat discussions emphasised resilience, choice and control. Participants considered which parts of the technology supply chain the UK needs to own, influence or control, and where cooperation with trusted partners can provide greater resilience.
The consistent message these conferences reinforced was the importance of understanding where critical dependencies sit. Can an essential service continue if access to a provider changes? Is switching technically possible, contractually feasible and affordable? Sovereignty becomes more tangible when tested against questions like these."
AI adoption must earn public trust
"AI was also treated as more than a technology policy issue. At the Labour conference in Liverpool, the emphasis was more strongly placed on adoption and delivery. Ministers linked AI to living standards, regional productivity and public confidence, arguing that success should ultimately be visible in higher median wages, productivity convergence across the country and greater trust in technology. This was paired with a more interventionist approach to public-sector adoption, reflecting the pace of AI development and traditional procurement and change cycles.
Internationally, Labour presented the UK as a potential norms and agenda setter: using its testing and safety capabilities to shape multilateral approaches to AI even without a domestic frontier-model developer. At the Conservative conference, the emphasis was less on accelerating adoption and more on the conditions needed to protect national capability and security.
Liberal Democrat conference discussions examined its effects on public services, individual rights, institutional trust and the distribution of political and economic power. Rather than measuring progress principally through investment, infrastructure or international rankings, participants questioned how government and industry should demonstrate that AI is delivering tangible public benefit.
For organisations deploying AI, trust will depend on more than statements of intent. Users and decision-makers will need evidence that systems work as expected, that their limitations are understood and that responsibility is clear when something goes wrong."
A more active state needs the capability to act
"Debates at the Labour and Liberal Democrat conferences envisaged a more active role for government in technology policy. Across both conferences, the implication was clear: a more active state must also be a more capable one. Effective intervention will depend not only on political ambition, but on government’s ability to act as an informed buyer, regulator and strategic partner.
Labour discussions focused more on delivery: stronger public-sector procurement, technical expertise and regulatory capability. Policymakers will need the expertise and institutional capacity to evaluate complex technologies, intervene where markets do not adequately protect the public interest and keep rules responsive as products and risks evolve.
In AI, this includes testing and evaluation, clearer responsibility for system performance and measures to address cyber and biosecurity risks. Decisions about infrastructure, suppliers and AI systems will increasingly influence not only compliance, but also competitiveness, operational resilience and long-term growth.
Liberal Democrat speakers questioned whether the state has sufficient technical and institutional expertise to negotiate with major technology companies, oversee critical providers and keep pace with technological change."
From ambition to resilience
"The conferences revealed different political priorities rather than a single cross-party position. Labour focused on adoption, delivery and domestic capability; Conservative discussions brought greater attention to security, resilience and strategic dependencies; and Liberal Democrat discussions emphasised choice, accountability and public trust. Nevertheless, several common policy questions are becoming harder to avoid.
Where are the UK’s most important technology dependencies? Does government have the expertise and institutional capability to manage them? How can AI adoption deliver measurable benefits while maintaining effective oversight? And how can national infrastructure ambitions earn public confidence locally?
For organisations, these are operational as well as political questions. They affect procurement, supply chains, AI governance, infrastructure planning and the ability to maintain essential services when circumstances change.
NCC Group will continue bringing practical cyber-security expertise into these debates and listening to policymakers across the political spectrum. You can learn more about our work on the NCC Group Global Policy Advocacy page."
Louise Horton biography
Louise leads UK public affairs for global cyber security firm NCC Group, shaping the organisation’s engagement with government, regulators and key policy influencers. Louise joined NCC Group from the Cabinet Office, where she led on cyber resilience.