- Email: info@mundyandco.uk
- Call Us: 01458 571234
The National Cyber Security Centre (NCSC) has issued a call to action to business leaders to build resilience to severe cyber threats. The NCSC reports that their Annual Review 2025 shows a widening gap between the rising pace of cyber threats and the UK’s collective resilience.
While the call to action and accompanying guidance are aimed primarily at the leaders of large organisations, cyber threats continue to be a challenge faced by businesses of all sizes.
The NCSC advises that when a cyber incident happens, it is often too late to start working out what should be done and who will do it. Therefore, it can pay to get the business ready so that if a cyber-attack does happen, it is better able to continue operating through the disruption, as well as to recover as quickly as possible.
For example, you might consider questions like:
The NCSC concludes that the organisations that fare best in severe cyber incidents are those that have put in place the steps needed to withstand and recover from disruption.
See: https://www.ncsc.gov.uk/blogs/preparing-for-severe-cyber-threat-why-leaders-must-act-now
A new campaign has been launched to encourage small and medium-sized businesses to take some simple, practical steps to protect themselves from the most common cyber-attacks. The main drift is that basic cyber hygiene still prevents the majority of incidents.
According to the Cyber Security Breaches Survey 2025, 43% of businesses and 30% of charities reported having experienced some kind of cyber security breach or attack in the last 12 months. Across the UK economy, cyber threats are estimated to cost £14.71 billion each year. For many businesses, a single major attack could be enough to put trading at risk.
Cyber Essentials
The campaign centres on Cyber Essentials, which was developed by the National Cyber Security Centre (NCSC) and the Department for Science, Innovation and Technology. It focuses on five key protections that most businesses can implement without needing to have specialist IT expertise. These are:
These five areas address the weaknesses most commonly exploited by cyber criminals. Basic oversights, such as out-of-date software or a lack of control over who has access to IT systems, continue to be the root causes of many incidents.
Getting Started
To help businesses get started, some free resources are being promoted as part of the campaign, including:
While it can be tempting to think you are too small to be a target, most cyber-attacks are automated and opportunistic and look for weaknesses in systems regardless of the size of the business. This campaign is a timely reminder that basic measures can significantly reduce the likelihood of disruption, protect cash flow and help safeguard customer trust.
