On 22 July 2025, the Department for Science, Innovation and Technology and the National Cyber Security Centre adopted cybersecurity guidance. The guidance urges organisations to take basic protective steps, obtain cyber essentials certification to demonstrate security standards and eligibility for government contracts, and use free online training for staff and leadership to build cyber resilience. It recommends tools to identify vulnerabilities, reporting cybercrime through official channels, and seeking support from cyber resilience centres and certified advisors. Larger businesses are advised to follow governance frameworks, including the Cyber Governance Code of Practice and the 10 Steps to Cyber Security. It also encourages all organisations to defend against threats, including ransomware and adopt specialised practices for software and Artificial Intelligence security. The guidance also promotes cyber threat information sharing via the Cybersecurity Information Sharing Partnership (CiSP).
Original source