Skip to main content
Two miniature school colleagues check a plain clipboard and paper beside a monitor in a small mint and cream office. Heading: “Ask your supplier what the proposal means”. asitplan, audit strategise achieve.
newsPublished Updated 2 min read

Cyber Security and Resilience Bill: Questions for IT Providers

A dated policy briefing with practical supplier-review questions, clearly separated from assumptions about future legal duties.

For Schools, Multi-Academy Trusts, IT providers, Businesses · asitplan Policy Team

Current position

The Cyber Security and Resilience (Network and Information Systems) Bill is still progressing through Parliament. Its published version on 7 September 2026 followed Grand Committee amendments in the Lords. Consult Parliament's bill page for the current text and passage.

Do not assume that every school, trust or supplier falls within its eventual scope. Applicability, obligations and commencement depend on the enacted legislation and relevant guidance.

Questions for your provider

  • Which existing duties and contractual reporting commitments apply to our service?
  • Who coordinates an incident, preserves evidence and escalates decisions?
  • Which supplier dependencies could disrupt teaching or business operations?
  • What evidence supports our recovery arrangements, and when was it last checked?

These are practical service-review questions, rather than a prediction of new legal duties.

Keep proposals separate

The Home Office's ransomware proposals are a separate policy programme. This briefing does not treat a ransomware payment ban or reporting proposal as a provision already enacted by this Bill.

Planning support

Record responsibilities, important dependencies and outstanding evidence in your review. Use our planning and evaluation checklist to structure that discussion. asitplan supports planning and evidence; it does not provide legal advice or certification.

Primary sources

Sources checked 10 October 2026.

Sources and further reading

Useful material for your next discussion

Material for Education. Download, share and discuss. No form or account needed.

Education downloads
EducationPDF · 2 pages

Education planning and evaluation checklist

Questions for school and MAT buyers, plus a reusable school evidence, action and investment worksheet.

For Schools, Multi-Academy Trusts

Version 1.255 KB
Download PDFView Education pack
EducationPDF · 4 pages

Education example report and roadmap

A fictional school review with evidence gaps, school and trust responsibilities, a three-year hardware plan and explicit cost exclusions.

For Schools, Multi-Academy Trusts

Version 1.2169 KB
Download PDFView Education pack

See how this would work for your organisation

Tell us about your organisation, priorities and any existing IT partner. We review your enquiry and pass relevant details to our distributor, who can coordinate a suitable partner or handle larger customers directly.

We will discuss scope and onboarding before access is arranged. This request does not book a demo or activate an account.

Request a demo Discuss pricing