UK Critical Infrastructure: Regulatory Mandates Outpace Risk Assessments (infosecurity-magazine.com)

• Regulation is the top driver for 35% of CI security leaders.
• Shift from risk-based to compliance-based security spending.
• Governmental policy increasingly dictates industrial defense budgets.

"New data indicates that 35% of UK critical infrastructure security leaders identify regulatory requirements as the primary influence on their security programs. This shift underscores a transition toward compliance-heavy defense models, where state-mandated standards dictate procurement and operational priorities over autonomous risk evaluations."