The Cyber Security and Resilience Bill Is Nearly Here.
- Date: 15 October, 2026
Is Your Team Ready?
The Cyber Security and Resilience (Network and Information Systems) Bill is in its final parliamentary stages. Organisations should be preparing now for:
- Managed service providers and data centres coming into scope for the first time
- Significant incidents reported to regulators within 24 hours, with a full report within 72 hours
- Fines of up to £17 million or 4% of global turnover, whichever is higher
- Greater scrutiny of critical suppliers and supply chains
New reporting duties will put more pressure on already scarce cyber skills. With 57% of UK businesses reporting a basic cyber skills gap, readiness depends on people as much as policy.
Awareness level: build a security-first culture across your organisation
For all staff, managers and business leaders.
- Cyber Security Awareness
- Security Culture programmes
- Cyber Risk for Business Leaders
Technical level: prove your expertise with industry-recognised certifications
For security professionals and IT teams.
- CISSP
- CISM
- CompTIA Security+
- Certified in Cybersecurity (ISC2)
Operational level: be ready to detect, respond and recover
For SOC analysts, incident responders and security operations teams.
- Incident Response
- Security Operations Centre (SOC) training
- Threat Intelligence programmes
Not sure where to start?
Talk to our cyber training experts. We'll help you map your team's skills against what the Bill will require.
Sources
- UK Parliament: Cyber Security and Resilience Bill stages
- Cripps: CSR Bill key changes and implications
- IASME: Changes to Cyber Essentials for April 2026
- UK: Cyber security skills in the UK labour market 2026
- DIGIT: Cyber Security Breaches Survey 2026 figures
- techUK: Cyber Security Breaches Survey 2025/26
