Description

Ministers and security chiefs issued letters to large businesses on cybersecurity responsibilities

On 13 October 2025, the Secretary of State for Science, Innovation and Technology, the Secretary of State for Business and Trade, the Minister for Security, and the Director General of the National Crime Agency issued letters to large businesses on cybersecurity responsibilities. It is addressed to businesses in the United Kingdom across all sectors and requests three actions, including adopting the Cyber Governance Code of Practice with board training and incident exercises, registering for the National Cyber Security Centre’s early warning service, and implementing Cyber Essentials across supply chains and internal systems. The measures aim to improve resilience, protect profitability, and support economic stability.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
cross-cutting
Implementation Level
national
Government Branch
executive
Government Body
central government

Complete timeline of this policy change

Hide details
2025-10-13
adopted

On 13 October 2025, the Secretary of State for Science, Innovation and Technology, the Secretary of…