United Kingdom: Department for Science, Innovation and Technology and National Cyber Security Centre adopted cybersecurity guidance

Description

Department for Science, Innovation and Technology and National Cyber Security Centre adopted cybersecurity guidance

On 22 July 2025, the Department for Science, Innovation and Technology and the National Cyber Security Centre adopted cybersecurity guidance. The guidance urges organisations to take basic protective steps, obtain cyber essentials certification to demonstrate security standards and eligibility for government contracts, and use free online training for staff and leadership to build cyber resilience. It recommends tools to identify vulnerabilities, reporting cybercrime through official channels, and seeking support from cyber resilience centres and certified advisors. Larger businesses are advised to follow governance frameworks, including the Cyber Governance Code of Practice and the 10 Steps to Cyber Security. It also encourages all organisations to defend against threats, including ransomware and adopt specialised practices for software and Artificial Intelligence security. The guidance also promotes cyber threat information sharing via the Cybersecurity Information Sharing Partnership (CiSP).

Original source

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
other regulatory body

Complete timeline of this policy change

Hide details
2025-07-22
adopted

On 22 July 2025, the Department for Science, Innovation and Technology and the National Cyber Secur…