Cyber Security And Resilience Bill

The Cyber Security and Resilience Bill is a UK parliamentary bill introduced in late 2025 to update and widen the country's cyber law, including the Network and Information Systems Regulations 2018, which set security duties for operators of essential services such as energy, water, transport, and digital infrastructure. It would bring more managed service providers and data centres under regulation, shorten the window for reporting significant incidents to regulators, and give government stronger powers to direct critical suppliers on security standards. For compliance and risk leaders, the bill signals that UK incident reporting and supplier oversight duties are about to tighten, so vendor contracts, incident response plans, and third-party risk reviews should be checked against the final text as it moves through Parliament.

1 item