Signal Cyber Security and Resilience Bill to widen protected digital services

Summary

The planned Cyber Security and Resilience Bill aims to strengthen UK defences and bring more essential digital services under protection than ever before. It would do so by widening the scope of existing regulation, placing regulators on a firmer footing and expanding reporting duties so that government gains a clearer picture of cyber threats. The report presents the bill as a key mitigation together with the Cyber Essentials certification scheme and the Product Security and Telecommunications Infrastructure Act. The background is that 43% of UK businesses faced cyber attacks in 2024/2025 and that ransomware is considered one of the greatest risks to government, business and infrastructure. The National Cyber Security Centre, as the national technical authority, also issues advice and guidance for organisations to follow.