The UK government is urging small businesses to take proactive steps in strengthening their cyber resilience, as part of a nationwide push to safeguard economic growth. In an open letter to the country’s 5 million+ small organisations, the CEO of the National Cyber Security Centre (NCSC), alongside the Minister for Digital Economy and the Minister for Small Business and Economic Transformation, highlighted the importance of cyber security and introduced the Cyber Action Toolkit as a practical starting point.
The Cyber Action Toolkit, developed by the NCSC, is a free resource designed specifically for sole traders and small businesses. It offers clear, step-by-step guidance to help organisations lay strong security foundations, monitor progress, and build resilience at their own pace.
“Cyber security is no longer optional—it’s essential for business continuity and growth,” the ministers stressed in their letter, encouraging business owners to explore the toolkit as an accessible entry point to better protection.
For businesses operating in sensitive or technology-focused sectors, the government is also promoting the Secure Innovation Security Review Scheme. This initiative provides part-funded security reviews delivered by NCSC and National Protective Security Authority (NPSA)-approved experts. The reviews help identify and mitigate risks, including those linked to state threats, and integrate protective security into broader business strategies.
Eligible businesses pay £500, with £2,500 funded by the government, and receive a £300 voucher toward Cyber Essentials certification. Places are limited, so early application is advised.
To make cyber security relevant across all levels of an organisation, NCSC offers Top Tips for Staff, a free training package that takes less than 30 minutes to complete. It covers four essentials: strong passwords, securing devices, defending against phishing, and reporting incidents. The training can be completed online or integrated into existing platforms.
For more insights into the development of the Cyber Action Toolkit, visit the NCSC blog: Breaking down the barriers to resilience.