Cyber Security and Resilience Bill
The UK government has launched a new Cyber Security and Resilence Bill designed to help strengthen the defences for essential public services. This will include healthcare, drinking water, energy and other vital services including transportation.
The bill also extends to suppliers of certain digital services to those industries and the launch today targets medium and large companies supplying IT management, IT support and cyber security to private and public sector organisations like the National Health Service being regulated for the first time. Because they hold 'trusted access' across critical national infrastructure and business networks, they will need to meet clear, strict security measures and have robust plans in place to deal with the consequences of a cyber incident.
The scope also includes UK Data Centres as they keep payment systems, payroll, AI and other key services running ensure they also meet more robust cyber security standards outlined in this bill.
This means that these suppliers have to meet minimum security requirements shutting down gaps in the supply chains criminals could exploit which could cause wider disruption.
Whilst axisfirst is outside the scope of these regulations, we strongly support these measures and fully expect the law to extend further in the future to include SME organisations. This works hand in glove with the new Cyber Assessment Framework from the National Cyber Security Centre.
Discover more: https://www.gov.uk/government/news/tough-new-laws-to-strengthen-the-uks-defences-against-cyber-attacks-on-nhs-transport-and-energy
12 November 2025