NCSC-backed Cyber Advisors offer free consultations to small businesses

Small and medium-sized businesses in the UK can access free, 30-minute consultations with approved Cyber Advisors to help them begin improving their cyber security and work towards Cyber Essentials certification.

The initiative is intended for organisations that may lack dedicated security staff or find cyber security difficult to navigate alongside everyday business demands. The National Cyber Security Centre (NCSC) says smaller companies are increasingly targeted because attackers may expect them to have fewer protective measures in place.

According to figures cited by the NCSC, 46% of small organisations and 65% of medium-sized organisations reported experiencing a cyber breach or attack in 2025. The organisation also says many smaller businesses view security as too expensive, complex or poorly suited to their practical needs.

Practical support for Cyber Essentials

Cyber Advisors are consultants assessed by the NCSC to work with smaller organisations. During an introductory session, businesses can ask questions about Cyber Essentials, the UK government’s baseline scheme for cyber security, and receive guidance on applying its five core requirements.

Advice may include identifying achievable improvements, understanding security controls and avoiding common errors during the certification process. The consultation is offered without obligation, allowing organisations to establish whether further support is appropriate.

More than 760 small organisations have reportedly used the free consultation option since it was introduced. Of those, over 150 have gone on to achieve Cyber Essentials certification through the route, while others remain in progress.

Additional NCSC resources

Cyber Advisors can also help businesses use other NCSC services, including Early Warning. The service provides notifications about potential threats, vulnerabilities and malicious activity affecting an organisation’s network, helping it respond before an issue escalates.

The NCSC’s Cyber Action Toolkit offers another starting point. It guides businesses through practical measures designed to reduce risks such as email compromise, data breaches and ransomware, while creating a pathway towards Cyber Essentials.

The free consultations are available to small and medium-sized organisations seeking initial guidance. Businesses can book a session with an approved Cyber Advisor through the NCSC’s Cyber Essentials resources.