UK Cyber Schemes
Cyber Security and Resilience Bill
A UK government bill reforming the Network and Information Systems regime, introduced 12 November 2025. As at 11 September 2026 it remains a Bill and has not received Royal Assent. Its proposed incident reporting model is an initial notification within 24 hours and a fuller report within 72 hours.
Why it matters: the duties require enactment and commencement, so nothing in it binds anyone yet.
Related Goldline services: ISO 27001 readiness assessment and whether NIS2 applies to a UK company.
Next step: ISO 27001 readiness assessment →
Questions about how this applies to you? Book a free 45 minute diagnostic.