Bridewell-Cybersecurity-in-Critical-National-Infrastructure-2026.md

## Executive summary: The 2026 Bridewell/Censuswide research report on UK Critical National Infrastructure cybersecurity finds the sector at an inflection point — 93% of organisations reported cyber attacks in the prior 12 months, with phishing, malware and outdated software common; regulation (CAF, NIS2) has become the primary driver of security maturity, AI adoption is accelerating alongside new governance risks, and persistent weaknesses remain in asset visibility, incident response speed, post-quantum preparedness and skills.