
The National Cyber Security Centre (NCSC) provides an ‘Exercise in a Box’ online tool that can help businesses check how resilient they are to cyber attacks as well as practise their response in a safe environment.
The tool will give you some exercises that can be carried out in your own time as many times as you want. The exercises include:
-A ransomware attack delivered by phishing email;
-Mobile phone theft and response;
-Being attacked from an unknown Wi-Fi network;
-Insider threat leading to a data breach;
-Third party software compromise;
-Threatened leak of sensitive data;
-Home & remote working; and
-Managing a vulnerability disclosure.
Micro-exercises are also included, covering areas like use of passwords and identifying and reporting a suspected phishing email.
To use ‘Exercise in a Box’ you need to register for an account with NCSC, and you’ll be provided with a tailored report that helps you to identify what to do next and sets out where you can find helpful guidance.
See: https://www.ncsc.gov.uk/information/exercise-in-a-box

From October 2025, businesses that fall under the UK’s Extended Producer Responsibility for packaging (pEPR) scheme will receive their first invoices, covering the period from 1 April 2025 to 31 March 2026.

The Financial Conduct Authority (FCA) has launched proposals that could see the £100 limit on contactless card payments raised - or even removed altogether. If agreed, shoppers may soon be able to pay for larger supermarket trips or restaurant bills with just a tap, without needing to enter a PIN.