Government-Backed Cyber Security Measures to Save UK Businesses Thousands

Small and medium-sized businesses (SMEs) across the UK can now access a significant Government-backed initiative offering a 75% discount on the Cyber Essentials certification programme. This scheme aims to assist businesses in implementing essential protections to shield their systems from cyber threats and attacks.

Recent analyses indicate that a substantial cyber-attack on a UK business could incur average costs of approximately £195,000. Such financial burdens detract from the resources available for reinvestment, hindering growth opportunities for both the businesses and the economy as a whole.

During a speech at the National Cyber Security Centre’s Annual Review, the Cyber Security Minister, Baroness Lloyd, will announce the Government’s commitment to supporting UK businesses in their efforts to enhance their cyber resilience.

The Cyber Essentials certification will be available at a reduced cost for micro, small, and medium-sized enterprises, allowing them to obtain this vital certification for as little as £80 and no more than £125 (plus VAT). This initiative provides businesses with peace of mind that they are protected against prevalent online threats.

Support for Supply Chains and Cyber Resilience

The Government is collaborating with over 230 companies that have committed to the Cyber Resilience Pledge, aiming to ensure the safeguarding of their supply chains and the implementation of essential security measures.

Participating organisations will have the capability to refer groups of SMEs within their supply chains for complimentary Cyber Essentials certification. Additionally, select businesses with limited in-house cyber expertise will benefit from access to a free cyber security advisor to assist them through the certification process.

This comprehensive support package is designed to facilitate practical cyber security actions for micro, small, and medium-sized businesses, simultaneously bolstering the supply chains of notable UK brands across various sectors, including food, banking, and essential services.

The Cyber Security Minister emphasised the importance of protecting SMEs, which collectively employ millions throughout the nation. The Government is dedicated to enabling these businesses to secure their digital systems amid increasing cyber threats.

Enhancing Software Security Practices

Alongside this initiative, a concerted effort is underway to bolster the security of software crucial to the UK’s economy. Fourteen new organisations have joined as Software Security Ambassadors, including Fortinet, Thales, and Capgemini, to advocate for secure software development and promote the adoption of the Software Security Code of Practice.

This programme aims to encourage software developers to align their products with established security standards, mitigating risks from common cyber threats. Ambassadors will also motivate their networks and supply chains to adhere to these security expectations, ultimately enhancing the security of software relied upon by millions.

These recent measures complement a broader strategy outlined in the recent Budget, which aims to strengthen the UK’s capacity to defend itself as artificial intelligence evolves both the nature of cyber threats and the tools available for defence. Key initiatives include a £70 million investment in the National Exposure and Real-Time Vulnerability Centre, £60 million for a national Cyber Shield, and funding for a National Agentic Security Unit.

Cyber Essentials Scheme Overview

The Cyber Essentials scheme is the Government’s recommended minimum standard for cyber security across organisations of all sizes. Developed by experts at the National Cyber Security Centre, this certification is aligned with five technical controls designed to prevent prevalent internet-based cyber security threats.

In addition to enhancing cyber resilience, organisations earning Cyber Essentials certification with a turnover below £20 million are eligible for up to £25,000 of cyber liability insurance.

The Cyber Essentials First Step Fund offers eligible micro, small, and medium-sized UK businesses a 75% discount on the cost of their first Cyber Essentials certification. This initiative, backed by £2.4 million in Government funding, is available on a first-come, first-served basis for businesses that have not been certified in the past four years and will remain open until March 2027 or until funding is exhausted. An estimated 6,000 new businesses could benefit from this offer.

Additionally, the Cyber Essentials for suppliers grant, amounting to up to £7 million until March 2029, provides fully Government-funded first-time certification and tailored Cyber Advisor support for eligible UK-based SME suppliers of Cyber Resilience Pledge signatories. Approximately 8,000 businesses are anticipated to benefit from this funding.

Commitment to Cyber Resilience

The Cyber Resilience Pledge represents a voluntary initiative through which organisations publicly commit to prioritising cyber security at the board level, signing up for the NCSC Early Warning service, and adopting a risk-based approach to require Cyber Essentials across their supply chains. More than 230 organisations have embraced the pledge, showcasing a united front in enhancing cyber security standards.

The Software Security Code of Practice lays out expectations for software security and resilience, while the Software Security Ambassadors scheme gathers organisations dedicated to promoting secure software development and fostering a robust cyber ecosystem.