TECHNOLOGY

A cyber-security starting point for London’s smallest businesses

The National Cyber Security Centre’s Cyber Action Toolkit is aimed at helping smaller organisations take practical steps. It is a starting point for action, not a security certificate.

A close-up of a black QWERTY keyboard
A close-up of a black QWERTY keyboard. Archive context, not a photograph of the current announcement or evidence of present availability. MichaelMaggs · CC BY-SA 3.0; proportionally resized and converted to WebP. · Photo source · Licence
Published Updated 1 min readEditor: Felix Aaron
PASS IT ONShare this guide
Other ways

Start with an ordinary working risk

A sole trader or small team can begin with the accounts and devices the business actually depends on.

Follow the official toolkit rather than treating a generic checklist copied from an unknown site as an audit.

Article type
Practical guide
Sources checked
21 October 2026; not live booking inventory
On this page

Give each action an owner

A recommendation only helps when someone completes it and knows how it will be maintained.

Record the task, the person responsible and the next review. Do not place passwords, recovery codes or customer records in a public progress document.

Know the boundary

Using the toolkit does not prove a system has been penetration-tested or make an incident impossible.

If a live compromise is suspected, follow the NCSC’s relevant incident guidance rather than waiting to finish a general improvement exercise.