back to news

No business is ‘too small’ to be a target for cyber criminals

17 March 2026

Small and medium-sized enterprises (SMEs) across the UK are being encouraged to take proactive steps to protect themselves from rising cyber threats by adopting the government-backed Cyber Essentials scheme.

Recent data shows that cyber attacks are no longer limited to large organisations. In fact, around half of UK small businesses reported experiencing some form of cyber incident in the past year, highlighting the growing risk to SMEs of all sizes.

Cyber Essentials, developed by the National Cyber Security Centre (NCSC), sets out a minimum standard of cyber security designed to prevent the most common attacks. The scheme focuses on five key technical controls, including secure configuration, access control, malware protection, firewalls and regular software updates.

For SMEs, achieving certification can deliver multiple benefits. Not only does it help protect sensitive data and systems, but it can also enhance business credibility and open doors to new opportunities, as many organisations now require suppliers to hold Cyber Essentials certification when bidding for contracts.

Importantly, the scheme is designed to be accessible and affordable, making it a practical first step for businesses looking to improve their cyber resilience without significant investment.

With cyber criminals increasingly targeting vulnerabilities rather than company size, taking action now is essential. Cyber Essentials offers a straightforward, effective way for SMEs to safeguard their operations and demonstrate a commitment to security.

👉 Businesses can learn more and get started here.