TL;DR
The chair of the Commons Public Accounts Committee says AI is “approaching government like a tsunami” and doubts Whitehall is ready for it, in a second annual report published on Wednesday 14 October. Sir Geoffrey Clifton-Brown’s complaint, as The Register reports it, is twofold: the civil service has 6% of its staff working in digital or data jobs against a 10% target, and departments are slow to replace legacy systems that leave them open to attack. Two days earlier the AI minister said a breach of the government’s own cyber defences seemed “likely, if not inevitable”.
Skills first
The report acknowledges that ministers have promised reforms to digital capability, but says they have not explained how or when the skills gap will close. Senior specialists are the scarcest, and the committee warns that hitting the 10% target means recruiting and keeping many more of them. Clifton-Brown also worries that another reorganisation, the new business, innovation, science and trade department, will set the effort back.
The committee’s own summary frames the report around a more volatile future, and names critical infrastructure, digital and transport above all, among the areas government must be ready for.
Legacy systems and fraud
On technology, the report accuses government of “a worrying lack of urgency” over legacy IT, which it says both creates cyber security risk and blocks the benefits of newer tools. It pairs that with a warning that generative AI is handing fraudsters more capable tools while departments risk slipping further back. On figures the PAC cites, fraud and error drain between £55 billion and £81 billion from taxpayers each year.
The Register pulls out the examples. The DWP overpaid £9.9 billion in 2025-26 and aims to cut the rate from 3.2% to 2.8% of spending by 2028-29. National Savings & Investments began an IT overhaul in 2020 whose cost had reached £3 billion by December 2024, £1.3 billion over plan, and which has carried a red rating since 2022-23. The Bank of England’s £431 million payments-system rebuild, finished in April 2025, is held up as the contrast.
Why it matters
In our view the report lands on a tension ministers have been voicing themselves. On Monday, Kanishka Narayan told an Imperial College audience that an AI-driven breach of UK government systems, like June’s incident at Australia’s Medicare, seemed likely, if not inevitable. The PAC’s answer is that the exposure is not only frontier AI but the ageing estate it would be used against.
Looking forward
The report sets no deadline for the digital staffing target and the government has not responded. Suppliers to Whitehall should expect the PAC to keep returning to legacy replacement and digital hiring, and to judge AI programmes by whether the systems underneath them can bear the weight.