Cyber security matters because most organisations in the UK rely on digital technology to function. Businesses that suffer a cyber attack or data breach can expect financial losses, lengthy service disruption, regulatory fines and reputational damage. Cyber security should be a key part of every organisation’s operational resilience.

The National Cyber Security Centreopens www.ncsc.gov.uk in a new tab (NCSC) provides free cyber security guidance and support to help make the UK the safest place to live and work online.


This service is being trialled and the content is under review. Help us improve it by giving your feedback.opens ditresearch.eu.qualtrics.com in a new tab


Cyber security resources

Tools and guidance to help small and medium-sized businesses defend and protect against cyber threats.

Get started with cyber security

Cyber Action Toolkitopens cybertoolkit.service.ncsc.gov.uk in a new tab
Get high-impact, low-effort actions to protect your business's money and reputation with this free cyber toolkit designed for small businesses.

Check Your Cyber Securityopens checkcybersecurity.service.ncsc.gov.uk in a new tab
Scan your public-facing systems for common vulnerabilities. No technical expertise required.

Next-level cyber security: tools and actions

Cyber essentialsopens www.ncsc.gov.uk in a new tab
A government-backed scheme to help protect your organisation from common cyber threats. Certification available.

Assured servicesopens www.ncsc.gov.uk in a new tab
Find trusted cyber security providers, certified by the NCSC against strict technical standards. These experts can support organisations to prevent, detect, and respond to cyber threats.

Prepare for, and respond to, cyber incidents

Early Warning Serviceopens www.ncsc.gov.uk in a new tab
Free service to receive alerts about potential cyber threats affecting your organisation and network.

Respond & Recover Overviewopens www.ncsc.gov.uk in a new tab
Step-by-step guidance on how to respond to and recover from cyber attacks.

Report a Cyber Incidentopens report.ncsc.gov.uk in a new tab
Use this service to report significant cyber incidents directly to the NCSC.

Supply chain cyber security

You're only as secure as your weakest link...

Many organisations rely on complex networks of suppliers. Recent years have seen increased cyber attacks resulting from vulnerabilities in supply chainsopens www.ncsc.gov.uk in a new tab.

For businesses wanting to assess the cyber security of their organisation's supply chain and gain assurance that adequate mitigations are in place, NCSC have produced some practical steps to help do this in their Supply Chain Cyber Security Guidanceopens www.ncsc.gov.uk in a new tab.

For guidance that goes beyond cyber security, refer to our building resilient supply chains guidance.

Case study: cyber essentials

With the financial services sector facing an evolving cyber threat, one the UK’s largest wealth management companies asked its partnership network of over 2,800 independent business to certify to Cyber Essentials Plus.

In such a large supply chain this had its challenges, but the decision is already showing a positive impact, with around an 80% reduction in cyber security incidents.

Read the full case study.opens iasme.co.uk in a new tab

Protect your business with the Cyber Action Toolkit

The toolkit is free, easy to follow, and quick to start for cyber security beginners. Answer a few simple questions to generate a list of actions handpicked for your business.

Last updated: