NHS England’s Data, Digital and Technology Committee update to the March 2026 Board flagged risks relating to cyber resilience, business continuity planning and specialist capacity.

The Committee also noted delivery risks linked to accelerated digital programmes, including workforce constraints and the need for clearer business ownership.

Key Developments

The Data, Digital and Technology Committee reviewed papers on the NHS England Resilience Programme and the Cyber Accelerator as part of the March 2026 Board committee updates. The Committee noted significant overlap between the two areas, insufficient alignment between teams and the need to consolidate strategic and policy decisions within the Cyber Accelerator.

The Committee identified concerns around prioritisation within the Cyber Accelerator Programme. It also noted slow progress on a national business continuity exercise following a severe cyber-attack and stated that scenario testing should focus on business operations and decision-making resilience, not only technical restoration.

The Committee highlighted workforce capacity as a specific risk. The update stated that the Voluntary Redundancy Programme represented a material and currently unmitigated risk, with scarce specialist capacity being drawn away from critical cyber and resilience work.

The Committee also considered accelerated digital programmes linked to delivery of the 10 Year Health Plan. It supported the direction of travel, but said several issues needed to be addressed before material investment was committed. These included limited executive involvement in developing the acceleration plan, the need for clear business ownership, and the absence of a completed technical or operational deliverability assessment.

The update also noted concerns about programme coherence, including how accelerated digital components connect to the Modern Service Framework pathway redesign approach, the timing of benefits from the Single Patient Record, and the need for clearer requirements for neighbourhood technology.

The People Committee update also referenced the Voluntary Redundancy Programme and the NHS England Transformation Programme. It noted the importance of maintaining oversight of workforce capability and organisational capacity, with particular attention to specialist capability and key organisational knowledge.

Why It Matters

The Committee update places digital delivery, cyber resilience and workforce capacity within the wider NHS operating context for 2026/27. NHS England is seeking to progress digital transformation while also managing organisational change, workforce pressure and delivery priorities across access, productivity and quality.

The cyber and resilience issues are relevant to NHS operational continuity because digital systems support appointments, diagnostics, clinical records, communications, patient flow and business operations. The Committee’s focus on business continuity and decision-making resilience indicates that cyber preparedness is being considered as an operational and governance issue, not only a technical issue.

The workforce capacity findings are also relevant to wider delivery. The Committee’s update indicates that scarce specialist capacity and the Voluntary Redundancy Programme may affect delivery of cyber, resilience and digital programmes. The People Committee’s update separately notes the need to maintain oversight of organisational capability and specialist knowledge during the transformation programme.

For NHS leaders, the March Board papers show that digital transformation is being considered alongside workforce capability, cyber resilience, operational ownership and programme deliverability.

Source References

• NHS England, Board Committee updates – Data, Digital and Technology Committee, March 2026.
• NHS England, Board Committee updates – NHS England People Committee, March 2026.
• NHS England, Meeting of the Board of NHS England – agenda, 26 March 2026.