New Cyber Security Initiative for SMEs
The UK Government has unveiled a significant initiative aimed at bolstering the cyber security of small and medium-sized enterprises (SMEs) throughout the country. As part of this effort, business owners can now access a remarkable 75% discount on the Cyber Essentials certification programme, which is designed to provide essential protections against prevalent cyber threats and attacks.
Recent studies indicate that a significant cyber incident could cost a UK business or organisation an average of approximately £195,000. Such financial burdens not only affect profitability but also hinder the capacity of businesses to reinvest and expand, ultimately impacting the broader economy and the livelihoods of their employees.
During her address at the National Cyber Security Centre’s Annual Review, Cyber Security Minister Baroness Lloyd will highlight the Government’s commitment to supporting UK businesses in navigating the challenges posed by cyber threats.
Affordable Protection for Small Businesses
The Cyber Essentials certification will be offered at a drastically reduced rate for micro, small, and medium-sized businesses, allowing them to secure their systems for as little as £80 and no more than £125 (excluding VAT). This initiative aims to instil confidence in business owners, ensuring their organisations are safeguarded against the most common online threats.
The Government is collaborating with over 230 businesses that have joined the Cyber Resilience Pledge, a commitment to bolster supply chain security and establish essential cyber protections. Participating organisations can refer groups of SMEs within their supply chains to receive Cyber Essentials certification at no cost. Additionally, select businesses with limited in-house cyber expertise will be supported by a free cyber security advisor throughout the certification process.
This comprehensive support package is designed to empower micro, small, and medium-sized businesses to take meaningful steps towards enhancing their cyber security, while simultaneously strengthening the supply chains of major UK brands across various sectors, including food, banking, and essential services.
Strengthening Software Security Practices
In conjunction with this initiative, there is a concerted effort to enhance the security of the software that underpins the UK economy. Fourteen new organisations, including Fortinet, Thales, Capgemini, and SANS, have joined as Software Security Ambassadors. These companies will work alongside the Government to promote secure software development practices and encourage the adoption of the Software Security Code of Practice throughout their supply chains and the wider economy.
The aim is to motivate software developers to align their products with the established code of practice, thereby fortifying their systems against common cyber threats. Ambassadors will also advocate for compliance with these standards among companies within their networks and supply chains, ultimately striving to secure the software infrastructure that millions rely upon daily.
Comprehensive Government Measures
These initiatives complement a broader strategy outlined in the recent Budget, which seeks to enhance the UK’s defences as artificial intelligence reshapes the cyber landscape. Key measures include an investment of £70 million to establish the National Exposure and Real-Time Vulnerability (NERV) Centre, aimed at maintaining a comprehensive understanding of vulnerabilities across critical national infrastructure and the economy.
Furthermore, £60 million will be allocated to develop a national Cyber Shield, utilising advanced AI to bolster the UK’s cyber defences, alongside a £25 million Challenge Fund to support UK-based AI and cyber security innovators. The establishment of a new NCSC AI Cyber Security Centre of Excellence in Manchester will focus on nurturing the next generation of cyber and AI professionals, while £40 million will be directed towards a National Agentic Security Unit to enhance monitoring capabilities and resilience against automated threats.
These measures, in conjunction with the new support for businesses and collaboration with the software industry, reflect the Government’s dedicated approach to fortifying cyber resilience across the UK economy.
Key Benefits of Cyber Essentials
The Cyber Essentials programme sets a fundamental standard for cyber security, tailored for organisations of all sizes. Developed by experts at the National Cyber Security Centre (NCSC), this certification is based on five technical controls aimed at mitigating the most common internet-based cyber security threats.
Beyond improving cyber resilience, organisations that achieve Cyber Essentials certification and have a turnover of less than £20 million may also qualify for up to £25,000 in cyber liability insurance. The Cyber Essentials First Step Fund offers eligible micro, small, and medium-sized UK businesses a 75% discount on the cost of obtaining this certification. Funded by £2.4 million from the Government, this initiative will be available until March 2027 or until the allocated funding is exhausted, with an estimated 6,000 new businesses expected to benefit.
Additionally, the Cyber Essentials for suppliers grant, which amounts to £7 million until March 2029, will provide fully funded first-time certification and tailored Cyber Advisor support for eligible UK-based SME suppliers associated with Cyber Resilience Pledge signatories. Approximately 8,000 businesses are anticipated to benefit from this funding.
The Cyber Resilience Pledge Explained
The Cyber Resilience Pledge is a voluntary initiative inviting organisations to publicly commit to prioritising cyber security at the board level, subscribing to the NCSC Early Warning service, and adopting a risk-based approach to enforce Cyber Essentials across their supply chains. More than 230 organisations have already signed the Pledge, and a complete list of signatories is available on the Government’s official website.
The Software Security Code of Practice establishes clear expectations for software security and resilience. The Software Security Ambassadors scheme unites organisations dedicated to promoting secure software development and fostering a robust cyber ecosystem.