Cyber Resilience Pledge

Hostile cyber activity in the UK is growing more intense, frequent and sophisticated. This is causing significant financial and social harm to UK businesses and citizens. The government is taking robust action to protect the nation and, because cyber security is a shared responsibility, is working closely with industry to improve UK cyber resilience.

The government has developed a voluntary Cyber Resilience Pledge which provides a tangible way for organisations to demonstrate their commitment to cyber security, boost their resilience to cyber attacks and differentiate themselves from their competitors.

The Pledge was formally launched at 10 Downing Street on 7 July 2026, along with a public announcement of organisations that have signed up.

Organisations signing the pledge commit to take the following actions:

Make cyber a Board responsibility:
a. Implement all actions within the Cyber Governance Code of Practice.
b. Ensure all board members undertake the NCSC’s Cyber Governance Training within 3 months, and then annually.

Sign up to Early Warning: Register for the Early Warning service within one month of signing the pledge.

Require Cyber Essentials across supply chains:
a. Register to the Cyber Essentials Supplier Check Tool within 2 months of signing the pledge.
b. Conduct a comprehensive audit of Cyber Essentials coverage.
c. Take a risk-based approach to requiring Cyber Essentials across your supply chain.

In addition to the above three actions, organisations signing the pledge would commit to the following:

Further details on the pledge can be found on this page.

Organisations which want to sign the Pledge should return the signed declaration to the DCMS Cyber Security team. You can also contact them to find out more.