The Cyber Security and Resilience (Network and Information Systems) Bill aims to strengthen the cyber security of organisations in the UK that provide essential services, such as healthcare, drinking water and energy.

The proposed new law will also integrate additional sectors, update incident reporting duties and confer powers on the government to instruct organisations in the interests of national security.

Members of the Lords considered amendments on subjects including voluntary notification of incidents, cyber threats and near misses; inclusion of service providers and software manufacturers under the NIS framework; designation of critical suppliers and supply chain vulnerabilities; protection and prosecution of 'good-faith' cyber security specialists; establishing a national cyber security support service for SMEs; and maintaining a Digital Sovereignty Strategy and board accountability.

There were three votes on proposed changes to the bill. Members voted to agree two amendments, which require the government to conduct a review on the effectiveness of the Network and Information Systems scheme within twelve months and maintain a register of state actors posing a threat to UK cyber security.

A third change, on the reporting of incidents involving frontier AI models, was voted on but disagreed to by members.

The third reading is scheduled for Monday 2 November.