What the pledge is
The government launched the Cyber Resilience Pledge (opens in a new tab) in July 2026. It's voluntary and open to organisations of any size.
Signatories commit to three actions, publish their signed declaration and report on their progress every year.
Our three commitments
- Make cyber security a board responsibility. We put the Cyber Governance Code of Practice in place, and every board member completes the NCSC's Cyber Governance Training by February 2027, then every year.
- Sign up to Early Warning. We register for the NCSC's free Early Warning service (opens in a new tab) by December 2026, so we hear about threats seen on our networks.
- Require Cyber Essentials across our supply chain. We register on the Cyber Essentials Supplier Check Tool, audit which of our suppliers hold Cyber Essentials, and require it based on risk.
Why we signed
We're an IASME-accredited Certification Body for Cyber Essentials and Cyber Essentials Plus, and we hold Cyber Essentials Plus ourselves. We ask the organisations we certify to meet a standard, and the pledge holds our own board to one.
What it means for our suppliers
If you supply us, expect us to ask whether you hold Cyber Essentials over the next few months. Where a supplier doesn't need it, our board records why and how we get assurance instead.
Our progress
The signed declaration and the status of each action are on our Trust & Assurance Centre (opens in a new tab). Our first annual update goes there by November 2027.