The UK government has warned that cyber threats to small businesses are rising, with half of firms reporting an attack in the past year.

To help organisations strengthen their defences, the government has created two free resources:

  • Cyber Action Toolkit, for simple, personalised protection steps
  • Cyber Essentials, the recognised certification scheme that guards against common attacks and provides added support.

Read below the full ministerial letter to understand the risks, and access the recommended tools, to improve your business’s cyber security.

GovLogo

24th November 2025 -

 

“To the UK’s small business owners and entrepreneurs,

 

The threats posed by cyber-attacks have never been more apparent. Recent high-profile incidents demonstrate how hostile cyber activity in the UK is growing more intense, frequent and sophisticated. Businesses of all sizes are suffering the consequences. 

 

The statistics are stark: half of small businesses in the UK report having suffered a cyber-attack in the previous 12 months and 35% of micro businesses reported phishing attacks.

 

Whether you are a sole trader, running a growing enterprise, or leading an ambitious startup, you are at risk of falling victim to cyber-crime which could disrupt your operations. 

 

This government is taking action to back your business against digital threats. We offer a range of practical tools and support to help protect what you have worked so hard to build, and to enable you to grow and innovate.

 

Protecting your business against a cyber-attack is much less onerous than having to pick up the pieces after a devastating attack. Good cyber security empowers your business to grow confidently, safeguard customer trust, and stay resilient in the face of evolving threats. You don't need to be a technical expert or have a large IT team to put effective protections in place. 

 

We understand cyber security may be daunting to many small businesses. That’s why we’ve developed the free Cyber Action Toolkit to make online protection accessible to all, wherever you are on your cyber journey. It is the starting point for all small organisations and when you are ready to progress, there is Cyber Essentials, the highly effective government-backed certification scheme which protects you against common cyber-attacks.

 

It’s time to act...

 

  • The Cyber Action Toolkit is a free, personalised cyber security solution from experts at the National Cyber Security Centre (NCSC) that turns cyber protection into simple, achievable steps for your business. It guides you through building stronger cyber protection at your own pace, with built-in features that recognise your progress.

 

  • Cyber Essentials goes beyond this to show your organisation meets the recognised UK minimum standard for cyber security and is protected against the most common threats. It includes free cyber insurance, access to a 24/7 emergency helpline and opens doors to government contracts and enhanced business opportunities. Organisations with Cyber Essentials are 92% less likely to make a claim on their cyber insurance.

 

If you do face an incident, help is available round the clock. Report fraud and cyber-crime through Action Fraud, or by calling 101 in Scotland. If your organisation holds Cyber Essentials certification, you have access to support through the 24/7 emergency helpline.

 

We encourage you to take five minutes today to explore these resources and take the first step towards better cyber protection.

 

Together, we can build a more resilient business community that is ready to meet the cyber challenges we face.”

Liz Lloyd CBE Minister for Digital Economy

Blair McDougall Minister for Small Business and Economic Transformation

Richard Horne National Cyber Security Centre Chief Executive Officer