Whitehall has done what Whitehall does best: shuffled the deckchairs, updated the letterhead, and called it reform. The Investment Security Unit, enforcer of the National Security and Investment Act, has completed its return journey from the Cabinet Office back to DBIST, the Department for Business, Innovation, Science and Technology. DBIST is, of course, merely the latest alias for a department that has traded under so many names: DTI, BERR, BIS, BEIS, DBT, that its own staff could be forgiven for checking the letterhead before signing a letter. In Whitehall, the one sector subject to truly continuous innovation is the organisational chart.

The NSIA is a precise but deliberately elastic instrument. It gives the Secretary of State power to scrutinise, condition, or block acquisitions of shares, assets, and intellectual property across seventeen sensitive sectors including AI, semiconductors, civil nuclear, data infrastructure, and more. "National security" is left undefined by design, so the net can always be cast wider.

Which makes the institutional question pointed. The Cabinet Office, whatever its faults, wears its security instincts plainly. DBIST's institutional gravity pulls toward growth, innovation, and open markets, all admirable, until the sectors most worth promoting turn out to be precisely the sectors most worth protecting.

For businesses and investors, the more interesting question is not where the Unit sits, but whether the change signals a subtle shift in regulatory emphasis. Few would expect the statutory framework of the NSIA to change overnight. However, the culture and priorities of the department overseeing the regime can influence how intervention risks are assessed, how engagement with businesses is conducted, and how the balance is struck between attracting investment and protecting strategic capabilities.

Companies considering acquisitions, investment rounds, joint ventures or technology transfers in sensitive sectors should therefore continue to treat NSIA risk assessment as an early-stage transaction issue rather than a regulatory afterthought. The sectors attracting the greatest government support, particularly in areas such as artificial intelligence, advanced computing, energy transition technologies and critical infrastructure, are often the same sectors likely to attract the closest scrutiny under the Act.

Where a unit sits shapes how it thinks. That is the quiet consequence nobody announces in the machinery-of-government press release.