The initiative, announced by Cyber Security Minister Baroness Lloyd, aims to enhance national resilience against cyber attacks. Recent estimates suggest a significant cyber-attack could cost a UK business an average of £195,000, impacting growth and the economy.
Eligible micro, small, and medium-sized businesses could pay between £80 and £125 (plus VAT) for the certification, ensuring protection against common online threats. The Government is also collaborating with over 230 businesses through the Cyber Resilience Pledge to safeguard supply chains.
Organisations that have signed the pledge can refer SME groups within their supply chains for free Cyber Essentials certification. Select businesses will also receive access to a free cyber security advisor, particularly those with limited in-house expertise.
Cyber Security Minister Liz Lloyd stated, "Small and medium-sized businesses employ millions of people across our nation, and should not be left vulnerable in the age of rising cyber threats. We are making it easier and cheaper to access expert cyber support..."
This initiative is part of a broader push to improve software security, with 14 new organisations joining as Software Security Ambassadors. These ambassadors will champion secure software development and encourage the adoption of the Software Security Code of Practice.
The measures build on recent Budget announcements, including £70 million for a new National Exposure and Real-Time Vulnerability (NERV) Centre and £60 million for a national Cyber Shield. A new NCSC AI Cyber Security Centre of Excellence in Manchester will focus on training future cyber and AI experts.
The Cyber Essentials scheme, developed by the NCSC, aligns with five technical controls to prevent common internet-based threats. Certified organisations with a turnover under £20 million may also receive up to £25,000 of cyber liability insurance.
The Cyber Essentials First Step Fund, backed by £2.4 million in Government funding, offers the 75% discount on a first-time certification for eligible businesses until March 2027 or until funds are depleted. Approximately 6,000 new businesses are estimated to benefit. The Cyber Essentials for suppliers grant, worth up to £7 million until March 2029, will provide fully Government-funded certification and support for SME suppliers nominated by Cyber Resilience Pledge signatories.
