Question to the Department for Science, Innovation & Technology:

To ask the Secretary of State for Science, Innovation and Technology, what steps her Department is taking to support SMEs to (a) implement cybersecurity measures and (b) procure AI systems securely; and whether she will make an assessment of the potential merits of providing (i) subsidised support and (ii) guidance to tackle the cost pressures that prevent small businesses from adopting secure-by-design practices.

Improving the cyber security of our nation’s SMEs is critical to the resilience of the wider economy. The Government provides free tools, guidance, and training to help SMEs implement cyber security measures. This includes the National Cyber Security Centre (NCSC’s) recently launched Cyber Action Toolkit which provides SMEs with tailored advice.

The Department for Science, Innovation & Technology (DSIT) and the NCSC, have introduced several voluntary Codes of Practice, covering Software, AI, and apps and app stores. These measures, co-designed with industry and experts, set minimum security requirements and support SMEs to securely adopt AI systems.

We will continue to work with industry and monitor the impact of these Codes of Practice. This will enable us to assess their effectiveness and consider further guidance and incentives to help SMEs confidently implement secure-by-design practices in a cost-efficient way. For immediate assistance, SMEs should get in touch with their regional Cyber Resilience Centre, which are run by the police and the Home Office, and offer free cyber advice and support to SMEs.