Government urges stronger cyber security: What businesses need to know

Cyber security again came into focus last week as the UK Government put pen to paper in a warning to the business community.

This comes as no surprise after the latest Annual Review published by the National Cyber Security Centre (NCSC) revealed that four ‘nationally significant’ cyber attacks occur every week. Indeed, Jaguar Land Rover is still recovering after a major cyber attack that made national news headlines throughout September.

The government’s open letter, headed “Making cyber security a board responsibility”, was addressed to FTSE 350 companies. However, smaller businesses should still pay attention, as the letter offers three practical steps all businesses can take to improve their resilience to cyber attacks.

Make cyber risk a board-level priority using the Cyber Governance Code of Practice

The Cyber Governance Code of Practice was published in April 2025 and provides a framework for boards and directors to incorporate cyber governance into their responsibilities. It is accompanied by further resources such as a toolkit (which can assist with implementing the Code of Practice) and additional training.

Sign up to the NCSC’s Early Warning service

This free service can inform of potential cyber attacks on your business’s network. In the event of a cyber attack, time is critical. The Early Warning service can provide vital extra time to shore up defences.

Require Cyber Essentials in your supply chain

Do you assess the cyber security risks of your suppliers? If not, you are not alone, as it is reported only 14% of UK businesses do. However, the rise of supply chain cyber attacks is making this an increasingly  important element of supplier due diligence.

Cyber Essentials is a government-backed certification scheme. The government requires this certification of most of its own suppliers and encourages private sector businesses to do the same in respect of their supply chain. This can provide reassurance against any previously unknown weak links and improve trust and confidence throughout the supply chain.

Further events are planned by the government to allow deeper insight into the ways that all businesses can improve their resilience to cyber attacks, so be sure to keep an eye out for any announcements.

For a full copy of the open letter, please visit Ministerial letter on cyber security to leading UK companies - GOV.UK.

How can we help?

Need further support navigating cyber security requirements and ensuring your business is adequately protected? Contact James Sarjantson, Head of Commercial and Digital, on 0113 201 0401 or email ku.oc1780382071.fcl@1780382071nostn1780382071ajras1780382071j1780382071.

Thank you to Trainee Solicitor Matthew Robinson-Storey for drafting this article.

*Important information about our articles*