ADBRS0034

Written evidence submitted by David Williams and Paul Lincoln.

1. Setting up for success

• Define the intended end outcome from the start and design processes backwards, including early focus on reintegration and relevant departmental roles.
• Clarify roles and responsibilities across Government; the “lead department” model created delivery challenges where expertise sat elsewhere.
• Ensure strong central coordination, with an empowered cross-Government SRO and effective multidisciplinary teams.

2. From crisis to sustainable delivery

• Crisis systems are rarely suitable long term; a planned shift to sustainable delivery is essential.
• Maintain focus on end outcomes and regularly test decisions against them, even during ongoing crises.

3. Data protection and security culture

• The breach highlights the importance of robust data protection, with lessons identified through internal reviews, cross-Government work, and ICO engagement.
• More broadly, Defence must embed a stronger security culture, with cyber, data, and physical security treated as core responsibilities.

4. Accountability and risk management

• Clear accountabilities are essential but complex in Defence, with responsibilities split across policy, compliance, and delivery.
• Senior leaders set risk appetite, but cannot be expected to be responsible (even if overall accountable) at board level for every action in the organisation. In that regard, ensuring adherence to standards set by the Department of State across Defence will be key to successful delivery of Defence Reform.

5. Transparency and scrutiny

• Multiple layers of scrutiny exist (Ministers, Accounting Officers, Treasury, Parliament), and effective oversight remains vital. 
• Super-injunction constraints limit additional scrutiny in practice - Parliament and media. But many layers of accountability and scrutiny do remain. 
• Timing matters—full scrutiny should follow when appropriate.
• Ensure there are clear internal policy/operational criteria for maintaining super-injunctions, regularly reviewed, and updated HMT guidance for Accounting Officers should take this into account.

21st April 2026