Policies · eGov
The UK Government has launched a scheme in which industry signatories act as ambassadors for secure software development, promoting a voluntary code of practice across sectors.
✦ AI SUMMARY 30-second read
- 59% of organisations experienced a software supply chain attack in the past year, underlining the urgency of the initiative.
- The scheme was announced on 6 January 2026 and launched on 15 January 2026, with a second cohort following on 29 October 2026.
- Ambassadors commit to promoting the Software Security Code of Practice, demonstrating its application, and feeding back into future policy.
Why it matters: Software supply chain weaknesses can disrupt essential public services, making industry-wide adoption of baseline security practices a broad economic concern.
This summary was generated by AI. Editors may review and update it.
Document details
| Document type | Policy |
|---|---|
| Issued by | UK Government (Department For Science Innovation And Technology) |
| Region | Global |
| Published | 3 November 2026 |
The UK Government's Department for Science, Innovation and Technology has established the Software Security Ambassadors Scheme, a programme under which industry signatories work alongside government to advance secure software development. The scheme was announced on 6 January 2026 as part of the Government Cyber Action Plan and formally launched on 15 January 2026.
A second group of ambassadors joined the scheme on 29 October 2026, broadening its reach across sectors.
The initiative sits alongside the Software Security Code of Practice, a voluntary set of principles designed to reduce software supply chain attacks and improve cyber resilience across the economy.
What the document says
Ambassador signatories have agreed to three core commitments: promoting the Software Security Code of Practice across different sectors, demonstrating how the code can be put into practice, and providing feedback to inform future policy development.
The scheme is described as part of the government's broader effort to improve UK cyber resilience and support a secure digital economy.
Who is affected
The scheme targets software developers and suppliers, who are encouraged to adopt the basic security practices set out in the Code of Practice. Businesses that rely on software — and by extension the public services whose supply chains depend on it — stand to benefit from wider uptake.
The government notes that 59% of organisations experienced a software supply chain attack in the past year, pointing to the scale of exposure across the economy.
Background
Software weaknesses can cause serious disruption to supply chains and to essential public services. The Code of Practice that underpins this scheme is voluntary, and the ambassador model is intended to build momentum for its adoption without mandating compliance.
The ambassadors are drawn from across industry and act as peer advocates, making the case within their own sectors for stronger software security practices.