Question to the Department for Science, Innovation & Technology:

To ask the Secretary of State for Science, Innovation and Technology, what recent steps have been taken to help protect UK businesses from cyber attack.

On 12 November 2025 the government introduced the Cyber Security and Resilience Bill to Parliament. The Bill will bring into scope more of the core services relied on across the economy, such as managed service providers, data centres and critical parts of supply chains. UK businesses and public services will be more secure and resilient as a result.

On 24 November 2025 ministers wrote an open letter to small businesses and business representative organisations with details of government support and guidance on cyber security. The letter has been published on gov.uk at https://www.gov.uk/government/publications/ministerial-letter-on-cyber-security-to-small-businesses.

The National Cyber Security Centre’s Active Cyber Defence service continues to protect UK people, businesses and public sector organisations from cyber attacks, including blocking billions of phishing attempts and removing 232,000 scams across 415,000 malicious web addresses.

I also refer the honourable member to the answer of 24 October 2025 to question 82366 which explained how the government has written to Chairs and CEOs of the largest UK companies asking them to take three key actions to protect themselves from cyber threats. The letter is available at https://www.gov.uk/government/publications/ministerial-letter-on-cyber-security-to-leading-uk-companies.