This webinar was delivered in partnership with the National Cyber Security Show.
The UK is overhauling the cyber security regime with the Cyber Security and Resilience Bill. The legislation aims to modernise the current NIS Regulations, bring many more organisations into scope, and introduce new duties on managed service providers, data centres, essential service operators and critical suppliers. It will also strengthen supply chain security, mandate faster incident reporting and give regulators clearer powers to enforce cyber resilience across UK industries.
In this webinar, we explained what the new Bill is designed to do, which sectors and businesses will be in scope, and how organisations can prepare to comply. We discussed the expanded coverage of MSPs and data centres, new designation powers for critical suppliers, the shift to a 24 hour reporting regime, and the government’s ability to set sector wide security standards. We also outlined what this means for governance, audits, supply chain due diligence and future regulatory costs for organisations.
VinciWorks experts answered questions on preparing for the UK’s new cyber security framework.
What this session covered
- What the Cyber Security and Resilience Bill is designed to achieve
- Which organisations will be in scope including MSPs, data centres and essential service operators
- How critical suppliers may be designated and what obligations they will face
- The new 24 hour and 72 hour incident reporting requirements
- How to prepare for supply chain scrutiny and third party security assessments
- What to expect from regulators including audits, information requests and cost recovery
- Practical steps to strengthen cyber resilience and prepare for compliance in 2026
