• Skip to primary navigation
  • Skip to main content
  • Skip to footer
UK Cyber Cluster Collaboration

UK Cyber Cluster Collaboration

UK Cyber Cluster Collaboration

  • Home
  • About
    • Meet the Team
  • Latest News
  • Cyber Clusters
    • UKC3 Working Groups
      • Ecosystem Development
      • Cyber Skills Growth
      • Innovation Working Group
  • Events
  • Contact Us
    • Partner with UKC3
    • Sign up to Newsletter
  • Cluster Login

UKC3 backs Ministerial call for SMEs to act on Cyber Risk

December 4, 2025 by UKC3

UKC3 has welcomed a new Ministerial letter urging small businesses to take cyber security more seriously in the wake of high-profile attacks on major UK companies. 

The letter, signed by Liz Lloyd CBE, Minister for Digital Economy, warns that hostile cyber activity is becoming ‘more intense, frequent and sophisticated’ – and that organisations of every size are now potential targets.

Recent incidents at companies including Marks & Spencer and Jaguar Land Rover underline the scale of the risk, with the JLR attack in August contributing to a 24% year-on-year revenue drop in its second quarter after production was halted for around five weeks. 

The letter, co-signed by Richard Horne, CEO of the National Cyber Security Centre (NCSC) and Blair McDougall, the Small Business Minister, highlights that half of UK small businesses have reported a cyber attack in the past 12 months, while 35% of micro businesses have experienced phishing attacks.

To help firms ‘stay resilient in the face of evolving threats’, ministers are directing SMEs to the free Cyber Action Toolkit. 

This online resource from the National Cyber Security Centre (NCSC) offers a simple, step-by-step way for organisations to strengthen their defences against email compromise, data breaches and ransomware, with personalised guidance and progress tracking. 

The letter also encourages businesses to work towards Cyber Essentials, the UK’s recognised minimum cyber security standard, which demonstrates protection against the most common attacks.

UKC3 co-chair, Dr Ismini Vasileiou, said: “This letter is a clear reminder that cyber risk is a board-level issue for every organisation, not just large enterprises. 

“Small businesses are deeply woven into national supply chains and local economies, so when they are hit, the impact ripples far beyond a single company. 

“Practical tools like the Cyber Action Toolkit and schemes such as Cyber Essentials give SMEs a realistic, affordable way to start improving their resilience today – and UKC3’s cluster network stands ready to help them turn that guidance into action on the ground.”

Filed Under: Blog

Stay in Touch

Sign up to receive the latest news, events, and announcements from UKC3
Sign Up

Footer

Logo

Email

info@ukc3.org
  • Home
  • About
  • Clusters
  • Events
  • Latest News
  • Cookie Policy
  • Privacy Notice
  • Contact Us

Copyright © 2026 · UKC3

Manage Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
Sponsorship Page Pop-Up