Cyber resilience in the UK: learning to take the punches

"The UK's Cyber Security and Resilience Bill recently passed its first reading in the House of Commons. This is just the first step in a process that should see the bill become law later in 2026, or in 2027. The legislation sets out to strengthen UK cyber defences, in what the Government calls a "fundamental step change in the UK's national security"."

"Although the CSRB has some similarities to NIS2, as Natalie Donovan, head of knowledge tech and digital at law firm Slaughter and May , the CSRB is not going as far as EU law. It will not, for example, cover as many sectors or mandate specific security requirements. What the new law does do, is mark a change in emphasis. The focus is on security across supply chains and increasingly, on resilience."

The Cyber Security and Resilience Bill has passed its first Commons reading and aims to become law in 2026 or 2027. The legislation strengthens UK cyber defences and is described as a 'fundamental step change' in national security. The law will compel certain categories of organisations, including managed service providers and data centre operators, to raise cybersecurity standards. Regulators will receive expanded powers and the Government will be able to direct regulators or regulated entities to respond to national security threats. The bill updates the 2018 NIS Regulations, focuses on supply-chain security, and shifts emphasis toward resilience rather than absolute defence.

Read at IT Pro