Small businesses are a vital part of the UK economy, and therefore a common target for cyber criminals. The government have announced a new package of support to help thousands of micro, small and medium-sized businesses protect themselves against common on-line threat through the adoption of the Cyber Essentials controls. Following the announcement at the National Cyber Security Centre’s Annual review on 3rd November 2026, Cyber Security Minister, Liz Lloyd, said:
‘Small and medium-sized businesses employ millions of people across our nation, and should not be left vulnerable in the age of rising cyber threats.. We are not going to sit back and let malicious actors take advantage – we will back our SMEs and help them be protected and secure.
We are making it easier and cheaper to access expert cyber support, identify and plug vulnerabilities in their digital systems, and achieve certification through our Cyber Essentials scheme.
It doesn’t matter whether you’re sitting at the head of the table in the boardroom, or working from the kitchen counter at home – if you run a business, no matter the size, securing your digital systems must be a top priority and we’re equipping businesses for the evolving digital future.’
The package brings together two complementary offers: the Cyber Resilience Pledge grant and the Cyber Essentials First Step Fund.
Funding options
Cyber Resilience Pledge grant
This grant supports eligible SME suppliers of organisations that have signed the Cyber Resilience Pledge. Selected suppliers can receive:
- Fully funded Cyber Essentials certification; covering the entire cost of the assessment
- Tailored support from an NCSC-assured Cyber Advisor; help from an expert to prepare for certification.
Pledging organisations will identify and notify selected suppliers that may benefit, and then IASME will support those suppliers through the application process. It is worth noting that funding is limited, and there is a deadline to apply. For the first allocation of funding, organisations need to have submitted their assessment by 15th March 2027. Additionally, being notified of funding does not guarantee a place.
Cyber Essentials First Step Fund
The First Step Fund offers a 75% discount on the cost of a new Cyber Essentials assessment. Eligible organisations just need to pay the remaining 25% (costs are dependent on organisation size).
To be eligible, your organisation must:
- Be a micro, small or medium-sized organisation, with fewer than 250 employees
- Be based in the UK
- Either be applying for the first time or not have held a Cyber Essentials certificate within the last four years.
To claim the discount, the assessment must be purchased before 31 March 2027 and then your organisation has six months to complete and submit it once purchased. Organisations that do not meet the eligibility criteria can still purchase Cyber Essentials at the standard price.
How to access this funding
- If you are a small business: Speak to one of our Cyber Essentials Certification Bodies or an Assured Service Provider (CB/ASP). They can check your eligibility and arrange your application. You can find a list of these on our website at https://iasme.co.uk/cyber-essentials/find-a-certification-body/. Alternatively, you can apply directly via our website at https://firststep.iasme.co.uk/ to find out if you are eligible.
- If you are a pledging organisation: Identify the suppliers you would like to notify, and get in touch with IASME via [email protected].
- If you are a Certification Body or Assured Service Provider: Register on the Supplier Assurance Tool at https://supplier-assurance.iasme.co.uk to access the funding for your clients.
Why it matters now
Cyber threats affect organisations of every size. Cyber Essentials is a practical, affordable first step, and these schemes are designed to make it easier to take that step.
Please note that funding is limited, so we encourage organisations to act early.
You can find more information about the funding at https://www.gov.uk/government/publications/cyber-essentials-funding-package/cyber-essentials-funding-package.
If you have questions about the funding or Cyber Essentials, please contact us at [email protected].
What is Cyber Essentials?
Cyber Essentials is a UK government-backed scheme that helps organisations protect themselves against the most common cyber threats. It focuses on five key technical controls:
- Firewalls
- Secure configuration
- User access control
- Malware protection
- Security update management
These controls address the basic weaknesses most exploited in cyber attacks. Certification to Cyber Essentials shows customers, partners and insurers that you take cyber security seriously, and can support access to supply-chain and government contracting opportunities. Additionally, eligible UK organisations with an annual turnover below £20 million may receive included cyber insurance when certifying their whole organisation.