Cyber Security and Resilience (Network and Information Systems) Bill

Consideration of Bill, as amended in the Public Bill Committee

New Clause 2

Cyber security support service for SMEs

“(1) The Secretary of State must, by regulations, make provision for the establishment and operation of a cyber security support service for relevant small and medium-sized enterprises (SMEs) for the purposes of improving the security and resilience of their network and information systems.

(2) For the purposes of this section, a relevant SME is one which is—

(a) an operator of an essential service,

(b) a relevant digital service provider,

(c) a relevant managed service provider, or

(d) a critical supplier,

within the meaning of the NIS Regulations.

(3) A support service established under this section must provide—

(a) advice and technical assistance to SMEs following a cyber incident; and

(b) guidance on recovery and remediation.”—(Victoria Collins.)

(b) guidance on recovery and remediation.”—(Victoria Collins.)

This new clause would require the Secretary of State to establish a cyber security support service for relevant SMEs.

I beg to move, That the clause be read a Second time.