UK Cyber Schemes
Cyber Security and Resilience Bill
A UK government bill reforming the Network and Information Systems regime, introduced 12 November 2025. As at 11 September 2026 it remains a Bill and has not received Royal Assent. Its proposed incident reporting model is an initial notification within 24 hours and a fuller report within 72 hours.
Why it matters: the duties require enactment and commencement, so nothing in it binds anyone yet.
Questions about how this applies to you? Book a free 45 minute diagnostic.