Government-backed scheme aims to cut the cost of cyber protection for thousands of businesses, while major companies pledge to improve software security across Britain’s
supply chains.
Thousands of small and medium-sized businesses across the UK are being offered significantly cheaper access to cyber security certification under a new government initiative designed to strengthen the country’s defences against increasingly sophisticated online threats.
Announced on 3 November 2026, the initiative provides a 75% discount on the Government’s Cyber Essentials certification scheme, enabling eligible micro, small and medium-sized enterprises (SMEs) to obtain certification for as little as £80 and no more than £125, plus VAT.
The programme is intended to help businesses implement essential digital safeguards without facing the substantial financial burden often associated with cyber security improvements.
The Government estimates that a serious cyber attack against a UK business or organisation could cost an average of £195,000. Such incidents can cause significant financial damage, disrupt operations, undermine customer confidence and divert resources away from investment and business expansion.
The new support was announced by Cyber Security Minister Baroness Liz Lloyd during a speech at the National Cyber Security Centre’s Annual Review.
Making cyber protection more affordable
The Cyber Essentials scheme provides businesses with a framework for protecting their systems against common online threats. Certification demonstrates that an organisation has implemented fundamental security measures to reduce its exposure to cyber attacks.
Under the new initiative, eligible businesses will benefit from a substantial reduction in certification costs, making it easier for smaller organisations to strengthen their digital security.
The Government is also expanding support through its Cyber Resilience Pledge, which has attracted more than 230 participating organisations from across the business community.
Companies that have signed the pledge will be able to refer groups of smaller businesses within their supply chains for completely free Cyber Essentials certification.
Selected businesses will also receive access to a cyber security adviser who can provide practical assistance throughout the certification process. The additional support is particularly aimed at organisations that lack specialist expertise or dedicated cyber security staff.
The initiative is designed to improve protection not only for individual businesses but also for the wider supply networks supporting major British companies in sectors including food, banking and essential services.
Baroness Lloyd said small and medium-sized enterprises employ millions of people across the country and must not be left exposed to growing digital threats.
She stressed that the Government intends to make professional cyber security assistance more accessible, helping businesses identify weaknesses, strengthen their systems and secure certification.
The minister also emphasised that cyber security should be a priority for businesses of every size, whether they operate from corporate offices or employees’ homes.
Major companies join drive for safer software
Alongside the financial support for SMEs, the Government is expanding its efforts to improve the security of software used across the British economy.
Fourteen organisations have joined the UK’s second cohort of Software Security Ambassadors, bringing additional expertise and industry influence to the initiative.
The new ambassadors are Fortinet, Thales, Capgemini, SANS, Risk Ledger, Zscaler, Acubed IT Solutions Ltd, CloudPeek, Dot On, Hippo Digital, Investec, IoT M2M Council, Nine23 and QinetiQ.
They will work alongside the Government to promote secure software development and encourage businesses to adopt the Software Security Code of Practice.
The code establishes expectations for software developers and suppliers, with the objective of reducing vulnerabilities that could be exploited by cyber criminals.
Ambassadors will encourage companies across their professional networks and supply chains to follow these standards, helping establish stronger security practices throughout the software industry.
The initiative reflects growing recognition that vulnerabilities in software can create risks far beyond the organisation that originally developed or deployed the technology.
Wider investment in national cyber resilience
The latest measures form part of a broader government programme announced in last week’s Budget to strengthen the UK’s ability to respond to cyber threats as artificial intelligence reshapes both the methods used by attackers and the technologies available to defenders.
The package includes several major investments:
£70 million for a National Exposure and Real-Time Vulnerability (NERV) Centre: The new centre, based within the National Cyber Security Centre, will develop a national picture of vulnerabilities affecting critical infrastructure and the wider economy.
£60 million for a national Cyber Shield: The initiative will use agentic AI to reinforce the country’s cyber defences, including a £25 million Challenge Fund for British AI and cyber security innovators.
A new AI Cyber Security Centre of Excellence in Manchester: The centre will focus on developing and training the next generation of government specialists in cyber security and artificial intelligence.
£40 million for a National Agentic Security Unit: The unit will develop capabilities to monitor and respond to uncontrolled bots and improve resilience against incidents involving autonomous AI agents.
£24 million to strengthen public-sector cyber security: The funding will support the deployment of advanced AI technologies to protect essential public services.
The Government says the combination of financial assistance for smaller businesses, industry cooperation and investment in advanced cyber security capabilities will help build a more resilient digital economy.
With businesses increasingly dependent on interconnected software systems and digital supply chains, the new measures are intended to reduce the risks posed by cyber attacks while helping organisations maintain operations, protect sensitive information and safeguard economic growth.
The discounted Cyber Essentials certification is expected to make it easier for thousands of smaller companies to take their first practical steps towards stronger cyber security, while the wider programme aims to address vulnerabilities across the UK’s digital infrastructure. Photo by Ecole polytechnique, Wikimedia commons.
