{
  "id": 3705706,
  "title": "Cyber Essentials is no longer a tick-box exercise – businesses need to act now",
  "url": "https://urgent.news/2026/08/27/cyber-essentials-is-no-longer-a-tick-box-exercise-businesses-need-to",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-27T08:55:11.000Z",
  "source": {
    "name": "TechRadar",
    "slug": "techradar",
    "url": "https://www.techradar.com/pro/cyber-essentials-is-no-longer-a-tick-box-exercise-businesses-need-to-act-now"
  },
  "original_language": "en",
  "account": "The Cyber Essentials framework, designed to provide basic security controls for businesses, has undergone significant changes. Recent reviews indicate that businesses of all sizes are at risk from cyber breaches, with 40% of companies affected in the past year alone. The new framework, dubbed 'Denzel,' aims to raise the bar and implement continuous cyber resilience. Key changes include stricter patch management and vulnerability management, requiring a 14-day window for critical patch deployment. MFA must be enabled on all cloud services and user accounts, with non-compliance resulting in certification failure. Additionally, businesses must replace legacy hardware and update operating systems, as vendors discontinue support for older systems. The framework emphasizes continuous improvement, shifting from a one-time compliance exercise to an ongoing commitment to security. Businesses are advised to review their current patching and MFA practices, assess their cloud service usage, and plan for hardware and software updates to remain compliant and minimize breach risks.",
  "summary": "The latest Cyber Essentials overhaul is raising the bar for businesses of all sizes.",
  "key_points": [
    "Cyber Essentials framework evolves into Denzel, focusing on continuous cyber resilience",
    "Stricter patch management, 14-day window for critical patches, mandatory",
    "Multi-factor authentication required on all cloud services and user accounts"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}