The rapid Investigation into November 2025 EFO publication error, published in December 2025, recommended that a deeper examination of recent Economic and fiscal outlook (EFO) events be urgently carried out with expert support. The National Cyber Security Centre (NCSC) agreed to carry out this work and its report has been published today:
The NCSC report has been published alongside a Treasury Budget Information Security Review, which also responds to a recommendation of the initial December 2025 investigation by providing a broader review of OBR IT and security arrangements:
Alongside the publication of the NCSC report, the non-executive members of the OBR’s Oversight Board have written to the Chair of the Commons Treasury Committee setting out the key conclusions for the OBR: