New campaign launched to ensure businesses protect themselves from cyber threats

A new government campaign has launched to provide practical advice to businesses to protect themselves from common cyber threats.

The campaign will encourage businesses to engage with the Cyber Essentials scheme, which is designed to protect against basic weaknesses that are most commonly exploited by attacks. Practical steps businesses will be encouraged to take include keeping software up to date and controlling who has access to accounts and data to immediately boost their cyber resilience.

The campaign comes as new figures reveal the scale of threat facing businesses and the financial impacts of a break. Significant cyber incidents cost an average of £195,000 and half of all small businesses have suffered a cyber breach or attack in the last 12 months: cyber threats are estimated to cost the UK economy nearly £15 billion every year.

In 2025, however, 92% fewer insurance claims were made by organisations with Cyber Essentials in place. Certification can also help businesses win government contracts, and eligible firms can access free cyber insurance, including a 24/7 emergency helpline, provided by the Cyber Essentials delivery partner.  

Developed by experts at the National Cyber Security Centre (NCSC) and the Department for Science, Innovation and Technology (DSIT), Cyber Essentials focuses on 5 key protections:

• firewalls
• secure configuration
• software updates
• user access control
• malware protection

It gives businesses clear, practical steps to follow helping them show customers and suppliers they take cyber security seriously.

NCSC CEO, Dr Richard Horne, said: 

“Many small business owners assume their business is too small to be on cyber criminals’ radar, but in reality, we know most attackers don’t care about size, reputation or logos – they are looking for opportunity and weaknesses.  

“Small businesses do not need to go to the ends of the earth to put baseline cyber security measures in place as the Cyber Essentials scheme can help them take practical steps today. 

“I urge all businesses to implement the five key security controls to help protect themselves against the most common, damaging online threats.”