Small businesses across the UK are being encouraged to take straightforward, practical measures to safeguard themselves against the increasing number of online threats — and a new free toolkit from the National Cyber Security Centre (NCSC) aims to make that process simpler than ever.

The Cyber Action Toolkit, launched this week at the NCSC’s Annual Review, provides tailored guidance designed to help sole traders, micro businesses and small organisations boost their cyber security.

According to the NCSC’s latest annual review, every organisation with a digital presence is a potential target for criminal cyber attackers. NCSC CEO, Dr Richard Horne, has urged all businesses to ‘act now’.

A Growing Concern

Recent figures reveal that 42% of small businesses experienced a cyber breach in 2024, while more than a third of micro businesses reported facing phishing attempts. Many small firms admit they are unsure where to begin — often because cyber protection can seem complex or overly time-consuming.

The new Cyber Action Toolkit aims to address this challenge by breaking down cyber security into clear, manageable steps, with straightforward actions matched to each business’s size and specific needs.

What the Toolkit Provides

The Cyber Action Toolkit is completely free to use and includes:

  • Personalised cyber security guidance.

  • Step-by-step actions tailored to business size.

  • Progress tracking and rewards that recognise each improvement made.

It’s organised across three levels — Foundation, Improver and Enhanced — allowing businesses to progress at their own pace and steadily build stronger resilience.

By implementing the fundamental measures recommended in the toolkit, businesses can also lay the groundwork for working towards Cyber Essentials certification in the future.

Taking the First Step

For many busy business owners, cyber security can easily slip down the to-do list. However, taking small steps now can prevent far greater problems later. The Cyber Action Toolkit provides a practical and accessible way to start improving protection today.

The toolkit is available free of charge via the NCSC website: https://cybertoolkit.service.ncsc.gov.uk