The UK government has recently put forward a new Bill in parliament designed to bolster cyber security across the country’s critical public services.
It was in fact, Science, Innovation, and Technology Secretary Rt Hon Liz Kendall MP who introduced the Cyber Security and Resilience Bill in order to strengthen “national security and protect growth by boosting cyber protections for the services that people and businesses rely on every day”.
The aim is to give essential public services, notably healthcare, water supply, transport, and energy, stronger defences against cybercriminals and state-sponsored threats.
According to the government: “In the face of increasing cyber threats, it will prevent disruption – keeping the taps running, the lights on and the UK’s transport services moving – while making sure those who supply our vital services have tougher cyber protections.”
The Bill sets out new security requirements for medium and large IT service providers, compelling them to report significant cyber incidents promptly and maintain solid plans for managing the fallout.
It also gives regulators the authority to identify crucial suppliers to essential services, such as NHS diagnostic partners or chemical suppliers for water networks, and require them to meet baseline cyber-security standards to close off supply-chain weak points.
Stronger penalties will be enforced for severe breaches and more power will be given to the technology secretary to guide regulators and key service operators to take targeted action when a cyber threat poses a risk to national security.
Recent research estimates that major cyber-attacks now cost UK businesses over £190,000 each, totalling about £14.7bn a year. Cyber-insurance payouts have surged too, with the ABI reporting a 230% jump in 2024 to £197m and urging firms to make cyber cover a core part of their risk strategy.
Major companies have already been hit in 2025, including M&S and Jaguar Land Rover. M&S said its breach nearly erased half-year profits despite a £100m insurance payout, while JLR’s attack is reportedly the UK’s priciest cyber breach with losses around £1.9bn.
CEO of the National Cyber Security Center, Dr Richard Horne reported that:
“The real-world impacts of cyber attacks have never been more evident than in recent months, and at the NCSC we continue to work round the clock to empower organisations in the face of rising threats. As a nation, we must act at pace to improve our digital defences and resilience, and the Cyber Security and Resilience Bill represents a crucial step in better protecting our most critical services.”
With almost £200 million in claims last year alone, insurance is clearly key to cyber resilience, providing significant financial backing alongside advice on security and response planning.
By aligning with the new Bill, these measures can support robust risk management and help safeguard the UK’s economic stability.