Business owners are being urged to “lock the door” on criminals as the UK government launches a new campaign to provide practical ways for organisations to protect themselves from common online threats.
Appearing across social media, podcasts, radio and business networks, the campaign aims to reach busy small and medium sized businesses where they are.
Cyber Essentials
It will encourage them to engage with the government’s Cyber Essentials scheme which sets out clear practical steps they can take to protect themselves from the most common cyber attacks.
This includes keeping software up to date and controlling who has access to accounts and data to immediately boost their cyber resilience.
Many cyber incidents exploit these basic weaknesses, which Cyber Essentials is designed to protect against.
It comes as new figures show the scale of threat facing businesses.
Significant cyber incidents cost an average of £195,000 and half of all small businesses have suffered a cyber breach or attack in the last 12 months.
Last year, 92% fewer insurance claims were made by organisations with Cyber Essentials in place – proving it works.
Certification can also help businesses win government contracts, and eligible firms can access free cyber insurance, including a 24/7 emergency helpline, provided by the Cyber Essentials delivery partner.
With cyber threats estimated to cost UK businesses £14.71 billion every year the campaign will help to protect the growth that’s fundamental to job creation, improving living standards and the funding of public services.
Cyber Security Minister, Baroness Lloyd, said: “No business is out of reach from cyber criminals.”
“SMEs play a vital role in our economy, and business owners work incredibly hard to build something valuable, but too many still assume cyber criminals only go after big brands.”
“The reality is criminals look for easy opportunities, and without basic protections in place, any business of any size can become a target.”
“I know smaller firms don’t have large IT teams, and that is exactly why Cyber Essentials matters.”
Five key protections
Developed by experts at the National Cyber Security Centre (NCSC) and the Department for Science, Innovation and Technology (DSIT), Cyber Essentials focuses on five key protections:
- firewalls
- secure configuration
- software updates
- user access control
- malware protection
For many firms, a single significant attack could be the difference between staying in business and closing their doors.
Free tools and resources
- Cyber Essentials Readiness Tool – an online self‑assessment to identify gaps
- Free 30‑minute consultations with an NCSC‑assured cyber advisor for SMEs that are preparing for Cyber Essentials certification.
- The chance to preview the Cyber Essentials ‘Question Set’ for free. The ‘Requirements for IT Infrastructure’ can be used alongside to help businesses identify if they’re ready for certification.
NCSC CEO, Dr Richard Horne, said: “Many small business owners assume their business is too small to be on cyber criminals’ radar, but in reality, we know most attackers don’t care about size, reputation or logos – they are looking for opportunity and weaknesses.”
“I urge all businesses to implement the five key security controls to help protect themselves against the most common, damaging online threats.”



