It's time for all small businesses to act
Summary
The National Cyber Security Centre (NCSC) warns that UK small businesses are frequent targets of cyber crime: around half suffer a cyber incident each year. To help, the NCSC has published the free Cyber Action Toolkit — a straightforward, step-by-step set of actions that builds basic protections quickly, even for non-technical users. Completing the toolkit helps defend against common threats such as phishing, email compromise and ransomware. The NCSC also urges businesses to follow up by obtaining Cyber Essentials certification, which strengthens defences further and offers additional benefits like free cyber insurance and access to an emergency helpline.
The article highlights resources to help businesses prepare for Cyber Essentials (Readiness Tool, Knowledge Hub) and points to NCSC-assured Cyber Advisors for in-person support. An open letter from the NCSC CEO and government ministers encourages all small business owners to use the Cyber Action Toolkit to protect their organisations and the wider UK economy.
Key Points
- There are about 5.5 million small organisations in the UK; half experience a cyber incident each year.
- The Cyber Action Toolkit is free, easy to follow and designed for non-experts to take immediate protective steps.
- The toolkit builds layers of protection against common attacks: phishing, email hacking and ransomware.
- Completing the toolkit is a stepping stone to Cyber Essentials certification, which provides stronger protection and practical benefits (insurance, helpline, market access).
- Practical support exists: Readiness Tool, Knowledge Hub and NCSC-assured Cyber Advisors for tailored help.
- Government and NCSC leaders have publicly encouraged small businesses to adopt the toolkit to bolster national resilience.
Why should I read this?
Look — if you run a small business, you’re not too small to be hit. This is a quick, practical heads-up and points you straight at a free toolkit that actually helps you do something useful today. No jargon, no tech PhD, just steps you can follow that will cut risk fast.
Context and Relevance
Small businesses form a huge part of the UK economy and are increasingly targeted by cyber criminals. Weak security at suppliers and small partners creates wider supply-chain risk, and many organisations now expect or require proof of basic cyber hygiene (e.g. Cyber Essentials). This article is timely given rising incident rates and growing regulatory and market pressure for demonstrable cyber readiness. Adopting the toolkit and seeking Cyber Essentials makes commercial sense as well as improving resilience.
Author style
Punchy: this isn’t optional background reading — it’s a practical call to action. If you care about keeping your business running and maintaining customer trust, the steps signposted here are worth doing now. Consider this a short, sharp nudge from the experts: get the basics in place and certify them.
Source
Source: https://www.ncsc.gov.uk/blog-post/time-small-businesses-act