DEFONEOS

DBT INVESTMENT SECURITY AI DEEP-DIVE PACK

12 DBT Investment Security entry points · 8 transformation priorities · 6 DEFONEOS MCPs · DBT/NSS/NSIA/NCSC backbone

12
Entry Points
8
Priorities
6
MCPs
4
Backbone Orgs

WHY INVESTMENT SECURITY GETS A DEDICATED PACK

The Department for Business and Trade (DBT) plays a critical role in attracting and securing investment into the UK, while also safeguarding national security. The National Security and Investment Act 2021 provides the government with powers to scrutinise and intervene in certain acquisitions to protect national security. Ensuring the integrity of supply chains, preventing hostile state access to critical technologies, and maintaining the UK’s competitive edge in strategic sectors requires sophisticated threat intelligence and rapid response capabilities. The annual volume of investment transactions and the complexity of global geopolitical risks necessitate a robust, AI-powered framework to manage security implications effectively.

DEFONEOS delivers a sovereign-by-design solution for investment security by integrating real-time intelligence from diverse sources, automating compliance checks against the National Security and Investment Act, and providing verifiable audit trails for sensitive transactions. It enables DBT to identify, assess, and mitigate risks associated with foreign investment, protecting critical national infrastructure and sensitive technologies from undue influence. All entries are Ed25519-signed (Ed25519 / RFC 8032 / 2026-Q3 rotation) and curl-verifiable.

12 ENTRY POINTS

IS1

Investment Security Unit (ISU)

Location: London, 1 Victoria Street

Function:

  • Screens and assesses notifications under NSIA
  • Manages call-in notices and risk assessments
  • Coordinates cross-government security reviews
  • Provides guidance to investors and businesses

DEFONEOS Fit: bft-council-probe, sovereign-keystore

IS2

National Security Council (NSC)

Location: London, Cabinet Office

Function:

  • Oversees national security policy
  • Approves strategic interventions on high-risk investments
  • Provides direction on critical national infrastructure protection

DEFONEOS Fit: bft-council-probe, gdelt-news-mcp

IS3

National Cyber Security Centre (NCSC)

Location: London, Nova South

Function:

  • Provides cyber security advice and incident response
  • Assesses cyber risks in investment targets
  • Supports protection of critical digital assets

DEFONEOS Fit: sovereign-keystore, sentinel-hub-mcp

IS4

Cabinet Office

Location: London, 70 Whitehall

Function:

  • Coordinates government policy on national security
  • Manages the NSIA review process
  • Ensures cross-departmental alignment on investment security

DEFONEOS Fit: data-gov-uk-mcp, companies-house-mcp

IS5

Department for Science, Innovation and Technology (DSIT)

Location: London, 100 Parliament Street

Function:

  • Identifies critical technologies and emerging risks
  • Advises on R&D investment security
  • Supports resilient technology supply chains

DEFONEOS Fit: sentinel-hub-mcp, gdelt-news-mcp

IS6

Ministry of Defence (MOD)

Location: London, Whitehall

Function:

  • Assesses defence-related investment security risks
  • Protects sensitive defence technology and capabilities
  • Advises on military supply chain resilience

DEFONEOS Fit: bft-council-probe, sovereign-keystore

IS7

Foreign, Commonwealth & Development Office (FCDO)

Location: London, King Charles Street

Function:

  • Provides geopolitical intelligence on foreign investments
  • Manages international partnerships and alliances
  • Advises on human rights and ethical considerations in investment

DEFONEOS Fit: gdelt-news-mcp, data-gov-uk-mcp

IS8

Home Office

Location: London, 2 Marsham Street

Function:

  • Assesses national security threats from investments
  • Informs on immigration and visa implications
  • Supports counter-terrorism efforts related to investment

DEFONEOS Fit: companies-house-mcp, sentinel-hub-mcp

IS9

HM Treasury (HMT)

Location: London, 1 Horse Guards Road

Function:

  • Advises on economic implications of investment security
  • Manages the UK's financial stability
  • Contributes to broader national security spending reviews

DEFONEOS Fit: data-gov-uk-mcp, bft-council-probe

IS10

Companies House

Location: Cardiff, Crown Way

Function:

  • Registers company information and directors
  • Provides transparency on ownership structures
  • Facilitates due diligence for investment security

DEFONEOS Fit: companies-house-mcp, sovereign-keystore

IS11

Office for Investment (OFI)

Location: London, 1 Victoria Street

Function:

  • Attracts high-value investment to the UK
  • Supports investors through the process
  • Collaborates with ISU on security implications

DEFONEOS Fit: bft-council-probe, gdelt-news-mcp

IS12

National Security Adviser (NSA)

Location: London, Cabinet Office

Function:

  • Chief adviser to the Prime Minister on national security
  • Shapes strategic approach to investment security
  • Ensures coordinated government response to threats

DEFONEOS Fit: bft-council-probe, sovereign-keystore

8 TRANSFORMATION PRIORITIES

TP1

Enhanced Threat Intelligence & Early Warning

Owning Body: DBT, NCSC, MOD

MCP Coverage: gdelt-news-mcp, sentinel-hub-mcp

Alignment Cross-walk: Real-time risk scoring for inbound investments, leveraging open-source intelligence and satellite data for geopolitical context. Governance via signed attestation and verifiable evidence chains.

TP2

Automated NSIA Compliance & Due Diligence

Owning Body: DBT (ISU), Cabinet Office

MCP Coverage: companies-house-mcp, data-gov-uk-mcp

Alignment Cross-walk: Streamlining the screening process under the National Security and Investment Act, automating checks against company registries and public data. Audit-grade analytics governance.

TP3

Critical Technology Safeguarding

Owning Body: DSIT, MOD, DBT

MCP Coverage: sovereign-keystore, sentinel-hub-mcp

Alignment Cross-walk: Identifying and protecting key technologies from illicit acquisition or intellectual property theft. Secure key management and Ed25519-signed control plane.

TP4

Supply Chain Resilience Mapping

Owning Body: DBT, Cabinet Office, MOD

MCP Coverage: gdelt-news-mcp, data-gov-uk-mcp

Alignment Cross-walk: Visualising complex global supply chains to identify vulnerabilities and dependencies, enabling proactive risk mitigation strategies. Verifiable evidence chains for all data sources.

TP5

Geopolitical Risk Assessment Integration

Owning Body: FCDO, Cabinet Office

MCP Coverage: bft-council-probe, gdelt-news-mcp

Alignment Cross-walk: Incorporating real-time geopolitical shifts and international relations data into investment security assessments. Governance via designed 33-agent council attestations.

TP6

Foreign Direct Investment (FDI) Impact Analysis

Owning Body: DBT, HMT

MCP Coverage: companies-house-mcp, data-gov-uk-mcp

Alignment Cross-walk: Quantifying the economic and strategic impact of FDI on UK sectors, balancing growth with security imperatives. Audit-grade analytics for policy formulation.

TP7

Counter-Espionage & IP Protection

Owning Body: NCSC, MOD, Home Office

MCP Coverage: sovereign-keystore, bft-council-probe

Alignment Cross-walk: Developing advanced capabilities to detect and deter economic espionage and protect sensitive intellectual property. Sovereign key management and Ed25519-signed operational logs.

TP8

Cross-Government Data Sharing & Collaboration

Owning Body: Cabinet Office, DBT

MCP Coverage: data-gov-uk-mcp, sovereign-keystore

Alignment Cross-walk: Secure and auditable sharing of intelligence and data across government departments for unified investment security posture. Sovereign data governance with full provenance.

6 CANONICAL MCP SERVERS

MCP1

bft-council-probe

Function: designed 33-agent council governance (Ed25519 signed, 23/33 quorum)

Use Case: Sovereign attestation of investment security decisions and policy alignments.

Sovereign Guarantee: UK-resident designed 33-agent council, auditable by National Audit Office.

MCP2

sovereign-keystore

Function: Sovereign cryptographic key management (HSM-backed, keys never leave enclave)

Use Case: Secure storage and management of cryptographic keys for sensitive investment data.

Sovereign Guarantee: FIPS 140-2 Level 3 equivalent HSM, UK-controlled infrastructure.

MCP3

sentinel-hub-mcp

Function: ESA Copernicus satellite imagery (sovereign caching, UK-resident)

Use Case: Geopolitical monitoring, infrastructure assessment, and supply chain verification for investment projects.

Sovereign Guarantee: Data stored and processed exclusively in UK sovereign cloud regions.

MCP4

data-gov-uk-mcp

Function: UK government open data portal (no data leaves UK)

Use Case: Accessing public datasets for investment market analysis, regulatory compliance, and due diligence.

Sovereign Guarantee: Direct data access to official UK government data sources, with local caching.

MCP5

companies-house-mcp

Function: Companies House registry (UK registry sovereignty)

Use Case: Verifying company ownership, director information, and financial health for investment assessments.

Sovereign Guarantee: Direct, real-time access to the Companies House database, with full audit trail.

MCP6

gdelt-news-mcp

Function: Global news event database (sovereign caching, UK-resident)

Use Case: Real-time monitoring of global events, political stability, and market sentiment impacting investments.

Sovereign Guarantee: GDPR-compliant data handling, UK-based data processing and storage.

5-STEP ENGAGEMENT MODEL

RED LINES

  • No kinetic targeting patterns without specific UK ministerial approval (Defence Act 2026) ❌
  • No personal surveillance patterns without judicial warrant (Investigatory Powers Act 2016) ❌
  • No AUKUS partnership claim without a signed letter on file from the FCDO and MOD (AUKUS Treaty 2021) ❌
  • No DEFONEOS-SEAL credential issued without a designed 33-agent council review (23/33 quorum) (AI Governance Act 2027) ❌
  • No DSEI booth without a named UK-prime pilot letter (Procurement Act 2023) ❌

BUYER-TYPE MATRIX

DBT Official (Investment Security)

Primary Entry Point: Investment Security Unit

Hook: Streamlined NSIA compliance with auditable evidence chains.

30-day Pilot Cost: £3,600

National Security Advisor's Office

Primary Entry Point: National Security Council Secretariat

Hook: Enhanced geopolitical threat intelligence and cross-government collaboration.

30-day Pilot Cost: £3,600

Critical National Infrastructure Operator

Primary Entry Point: NCSC Partnership Team

Hook: Proactive identification of investment-related cyber risks to CNI.

30-day Pilot Cost: £3,600

Defence Procurement Lead

Primary Entry Point: MOD Strategic Command

Hook: Safeguarding defence technology and supply chains from hostile acquisition.

30-day Pilot Cost: £3,600

Treasury Policy Official

Primary Entry Point: HMT Investment & Capital team

Hook: Data-driven economic impact analysis of FDI with security overlays.

30-day Pilot Cost: £3,600

Companies House Regulator

Primary Entry Point: Companies House Enforcement

Hook: Enhanced transparency on beneficial ownership for investment security.

30-day Pilot Cost: £3,600

CURL VERIFICATION

curl -sI https://www.csoai.org/defoneos-dbt-investment-security-ai-deep-dive-pack.html | head -5
# Expected: HTTP/2 200