The Government will be reviewing the scope of cybersecurity obligations for CII owners, to potentially include non-CII systems.