National Cyber Security Centre launches SME cybersecurity toolkit

The National Cyber Security Centre (NCSC), part of GCHQ, has announced the launch of the Cyber Action Toolkit. The toolkit is designed to act as a single destination for sole traders, micro businesses and small organisations to begin developing their cyber defences.

The free, personalised toolkit will provide businesses with straightforward actions, tailored to the size and specific needs of their organisation, and is aimed at helping small businesses and sole traders to protect their staff, money and reputation in the face of growing cyber threats.

A press release from NCSC cites research showing that 42 per cent of small businesses reported cyber breaches last year and that 35 per cent of micro businesses were targeted by phishing attacks. Despite the growing risk, the NCSC says, many SMEs are unsure of how to begin building cyber protection against common threats.

As part of its annual review, the NCSC has warned that all organisations with digital assets are a potential target for cyber criminals. The organisation’s CEO Dr Richard Horne has urged all businesses to act quickly in order to build collective UK resilience to cyber threats and close the widening gap between rapidly developing cyber threats and the current capabilities of businesses to guard against them.

The toolkit takes into account the specific needs of a business to personalise recommendations, initially focusing on high-impact, low-effort steps. The service features built-in gamification, with users progressing from Foundation level to Improver and finally Enhanced.

The toolkit is the latest in a series of products, services and guidance that the NCSC has launched in an effort to improve cyber resilience across UK organisations. It is designed to form a starting point for SMEs to implement basic measures and build confidence to work towards attaining Cyber Essentials, a government-backed certification scheme that shows an organisation meets the UK’s recognised minimum cybersecurity standards.

Jonathon Ellison OBE, Director of National Resilience at the NCSC, commented: “In our digital-dependent society, it is vital that businesses take responsibility for their cyber security to defend against and recover from common cyber attacks. However, we know it can be hard for sole traders and small businesses to know where to begin.”

“That is why we have designed the Cyber Action Toolkit: a personalised, user-friendly entry point that equips you to start building a strong cyber security foundation. Every step taken makes the UK more resilient, and by putting this toolkit into practice, you can work towards making yourself and your business more confident and capable.”