UK Cyber Security & Resilience Bill Clears Commons — Enters Lords 25 June 2026: The 10-Step MSP & SME Compliance Plan Every UK Business Must Start Now
The UK Cyber Security and Resilience Bill passed all House of Commons stages and entered the House of Lords on 25 June 2026 — the most significant expansion of the UK’s cyber regulation framework since NIS 2018, extending mandatory duties to 1,000+ managed service providers and digital supply chains for the first time. With Royal Assent expected by late 2026 and phased enforcement through 2028, every UK SME and MSP now has a closing window to achieve Cyber Essentials certification, implement the CAF controls, and build the evidence base regulators will demand.
