Correspondence

Ministerial letter on cyber security to small businesses

Published 26 November 2025

UK Government
70 Whitehall
London
SW1A 2AS 

24 November 2025 

To the UK’s small business owners and entrepreneurs

The threats posed by cyber attacks have never been more apparent. Recent high-profile incidents demonstrate how hostile cyber activity in the UK is growing more intense, frequent and sophisticated. Businesses of all sizes are suffering the consequences. 

The statistics are stark: half of small businesses in the UK report having suffered a cyber attack in the previous 12 months and 35% of micro businesses reported phishing attacks. 

Whether you are a sole trader, running a growing enterprise, or leading an ambitious start-up, you are at risk of falling victim to cyber crime which could disrupt your operations. 

This government is taking action to back your business against digital threats. We offer a range of practical tools and support to help protect what you have worked so hard to build, and to enable you to grow and innovate. 

Protecting your business against a cyber attack is much less onerous than having to pick up the pieces after a devastating attack. Good cyber security empowers your business to grow confidently, safeguard customer trust, and stay resilient in the face of evolving threats. You don’t need to be a technical expert or have a large IT team to put effective protections in place. 

We understand cyber security may be daunting to many small businesses. That’s why we’ve developed the free Cyber Action Toolkit to make online protection accessible to all, wherever you are on your cyber journey. It is the starting point for all small organisations and when you are ready to progress, there is Cyber Essentials, the highly effective government-backed certification scheme which protects you against common cyber attacks. 

It’s time to act

• The Cyber Action Toolkit is a free, personalised cyber security solution from experts at the National Cyber Security Centre (NCSC) that turns cyber protection into simple, achievable steps for your business. It guides you through building stronger cyber protection at your own pace, with built-in features that recognise your progress.
• Cyber Essentials goes beyond this to show your organisation meets the recognisedUK minimum standard for cyber security and is protected against the most common threats. It includes free cyber insurance, access to a 24/7 emergency helpline and opens doors to government contracts and enhanced business opportunities.Organisations with Cyber Essentials are 92% less likely to make a claim on their cyber insurance.

If you do face an incident, help is available round the clock. Report fraud and cyber crime through Action Fraud, or by calling 101 in Scotland. If your organisation holds Cyber Essentials certification, you have access to support through the 24/7 emergency helpline. 

We encourage you to take five minutes today to explore these resources and take the first step towards better cyber protection. 

Together, we can build a more resilient business community that is ready to meet the cyber challenges we face. 

Yours sincerely, 

Liz Lloyd CBE

Minister for Digital Economy, Department for Science, Innovation and Technology

Blair McDougall

Minister for Small Business and Economic Transformation, Department for Business and Trade

Richard Horne

Chief Executive Officer, National Cyber Security Centre