Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Browse News Feed Stats Watchlists Beta About Contact

UK government introduces Cyber Security and Resilience Bill

Public Sector Action
First reported
Last updated
Happening score
H score 21
2 unique sources, 3 articles

Summary

Hide ▲

The UK government introduced the Cyber Security and Resilience Bill to Parliament on November 12, 2025, moving a major cyber legislation package into the policy process. The bill would expand obligations for operators of essential services, managed service providers, data center providers, and other critical suppliers. It also strengthens incident reporting, security standards, and regulatory oversight under the UK's existing cyber-resilience framework. The proposal is intended to reduce disruption across critical infrastructure, including healthcare, energy, water, transport, and other essential services.

Related Happenings

UK government FCA Bank of England and **CMORG** Issued a statement urging firms to actively manage frontier AI cyber risks and strengthen defenses for **May 15** and ongoing

Public Sector Action
First: 18.05.2026 12:00 Last: 18.05.2026 12:00 Sources 1

About this happening: The **UK government**, **FCA**, and **Bank of England** issued a **May 15** statement telling **UK financial services firms** to actively manage **frontier AI** cyber risks, becau...

Open Happening

ICO releases five-step AI cyber guidance

Public Sector Action
First: 14.05.2026 12:00 Last: 14.05.2026 12:00 Sources 1

About this happening: The **UK Information Commissioner’s Office (ICO)** released a **five-step guide** urging organizations to prepare for **AI-powered cyber threats**, making it clear that stronger r...

Open Happening

UK government Continues parliamentary passage of the Cyber Security and Resilience Bill for Following the King’s Speech on May 13

Public Sector Action
First: 13.05.2026 12:05 Last: 13.05.2026 12:05 Sources 1

About this happening: The **UK government** is advancing the **Cyber Security and Resilience Bill** through parliament, a move that would raise resilience requirements for **critical infrastructure pro...

Open Happening

UK Cyber Resilience Pledge pushes board-level security and supply-chain hardening

Defensive Guidance
First: 13.05.2026 12:05 Last: 13.05.2026 12:05 Sources 1

About this happening: The **UK government's Cyber Resilience Pledge** will launch later this year, giving organizations a concrete set of steps to strengthen defenses and reduce supply-chain risk. It a...

Open Happening

UK government cyber resilience funding and pledge

Public Sector Action
First: 22.04.2026 17:10 Last: 22.04.2026 17:10 Sources 1

About this happening: **UK government** announced **£90m ($120m)** in cybersecurity funding and a new **Cyber Resilience Pledge**, aiming to strengthen **national cyber resilience**. The initiative was...

Open Happening

Timeline

  1. 27.11.2025 11:00 2 articles · 6mo ago

    UK government introduces Cyber Security and Resilience Bill

    Initial Disclosure

    The **UK government** introduced the **CSR Bill** to the **House of Commons** on **November 12**, launching parliamentary review of a broader cyber-regulation package. The proposal targets essential services and regulated providers with new reporting and enforcement rules.

    Show sources
    Open in new tab
  2. 12.11.2025 16:08 2 articles · 6mo ago

    UK Parliament introduces Cyber Security and Resilience Bill

    Legal Policy Action Update

    The UK Parliament introduced the Cyber Security and Resilience Bill on November 12, 2025 to harden hospitals, energy systems, water supplies, transport networks, data centers, and smart energy infrastructure against cyberattacks. The measure builds on the Network and Information Systems (NIS) Regulations 2018, requires medium and large managed service providers to meet mandatory security standards, keep effective response plans, and report significant cyber incidents to the National Cyber Security Centre (NCSC) and their regulator within 24 hours with full reports due within 72 hours, and gives regulators power to designate critical suppliers and impose turnover-based penalties as the government cites major NHS disruption, over 11,000 medical appointments affected, and the compromise of the Ministry of Defence's payroll systems.

    Show sources
    Open in new tab
  3. 12.11.2025 11:40 2 articles · 6mo ago

    UK government introduces Cyber Security and Resilience Bill

    Initial Disclosure

    The UK government introduced the Cyber Security and Resilience Bill to parliament in the United Kingdom this morning, saying the legislation is intended to bolster national security and protect the economy.

    Show sources
    Open in new tab
  4. 12.11.2025 11:40 1 articles · 6mo ago

    Bill proposes wider UK cyber reporting and security duties

    Legal Policy Action Update

    The proposed legislation would update the UK's Network and Information Systems (NIS) Regulations 2018 toward NIS2-style requirements by regulating managed service providers for the first time, extending scope to data center providers and other critical suppliers, requiring operators of essential services to meet proportionate and up-to-date security requirements from the NCSC Cyber Assessment Framework, expanding incident reporting to an initial notice within 24 hours and a full report within 72 hours, and enhancing the Information Commissioner's Office powers to assess cyber risk proactively.

    Show sources
    Open in new tab