The Green Book (2026) and the ICO’s new statutory AI/ADM code change how public‑sector transformations must be appraised, contracted and governed. This short, practical playbook gives SROs and commercial leads the operating‑model and assurance actions to move from compliant appraisal to executable, low‑risk delivery.

The Cyber Security and Resilience Bill (NIS Bill) and NCSC’s Cyber Assessment Framework v4.0 change the bar for board accountability. Senior leaders must act now to avoid regulatory surprise, protect essential functions and harden supplier controls. This briefing gives a practical, commercially-focused 90‑day plan and an evidence pack template for boards and SROs.

A short, practical guide for senior leaders to turn Treasury approvals into assured delivery. Align the IAAP with Green Book expectations, build an SRO‑ready evidence pack, and adopt three 90‑day priorities that protect benefits and reduce rework.

Senior leaders in government and the NHS must act now to reduce vendor concentration, tighten data governance and align procurement with new AI guidance. This brief sets out a practical, commercial plan — drawn from recent UK sources — to secure services, manage vendor risk and retain sovereign capability.

Recent Fortinet, Cisco SD-WAN and Lantronix exploitation shows why edge devices need more than patching. They need ownership, evidence and recovery design.

Senior leaders in central and local government need a short, practical plan to move from policy to operational controls that satisfy the Data (Use and Access) Act, ICO guidance and NCSC security expectations while enabling safe AI adoption.

The EU AI Omnibus extends some high-risk AI timelines, but transparency duties still start on 2 August. Organisations should use the extra time to build evidence.