Business owners are being urged to “lock the door” on cyber-crminals as the UK government launches a new campaign to provide practical ways for organisations to protect themselves from common online threats.

Appearing across social media, podcasts, radio and business networks, the campaign aims to reach busy small and medium sized businesses where they are. It will encourage them to engage with the government’s Cyber Essentials scheme which sets out clear practical steps they can take to protect themselves from the most common cyber-attacks.

This includes keeping software up to date and controlling who has access to accounts and data to immediately boost their cyber resilience. Many cyber incidents exploit these basic weaknesses, which Cyber Essentials is designed to protect against.

It comes as new figures show the scale of threat facing businesses. Significant cyber incidents cost an average of £195,000 and half of all small businesses have suffered a cyber breach or attack in the last 12 months.

Last year, 92% fewer insurance claims were made by organisations with Cyber Essentials in place – proving it works. Certification can also help businesses win government contracts, and eligible firms can access free cyber insurance, including a 24/7 emergency helpline, provided by the Cyber Essentials delivery partner.

With cyber threats estimated to cost UK businesses £14.71 billion every year the campaign will help to protect the growth that’s fundamental to job creation, improving living standards and the funding of public services.

“No business is out of reach from cyber-criminals. SMEs play a vital role in our economy, and business owners work incredibly hard to build something valuable, but too many still assume cyber criminals only go after big brands,” cyber security minister Baroness Lloyd said.

“The reality is criminals look for easy opportunities, and without basic protections in place, any business of any size can become a target.

“I know smaller firms don’t have large IT teams, and that is exactly why Cyber Essentials matters. It provides a straightforward checklist to lock the door on cyber criminals, without needing specialist expertise. Cyber risk is business risk, just like fire or theft, and the protections are just as essential. I urge businesses to take action and adopt Cyber Essentials now.”

The Cyber Essentials focuses on five key protections: firewalls; secure configuration; software updates; user access control; and malware protection.

Recommended reading

• NHS Scotland Invests £3M in AI Anti-ransomware Software
• UK Facing 4 Major Cyber-Attacks Each Week, Warns NCSC
• New Bill Targets Cyber Threats to UK Infrastructure

New research published today also reveals the scale of the cyber threat facing UK businesses more broadly. The Cyber Security Longitudinal Survey shows 82% of medium and large businesses suffered a cyber incident in the past year – meaning no business, regardless of size, is out of reach from cyber criminals.

More organisations are recognising the benefits of taking action. Adoption of Cyber Essentials among larger companies has risen from 23% to 30%, reflecting a growing understanding of the need for basic cyber protections.

With uptake improving among larger firms, there is clear momentum but more still needs to be done. This campaign is targeted at smaller businesses, encouraging them to adopt baseline protections like Cyber Essentials, strengthening supply‑chain security while supporting SME resilience, continuity, and long‑term growth.