NCSC Annual Review 2025
Looking back at the National Cyber Security Centre's ninth year and its key developments and highlights, between 1 September 2024 and 31 August 2025.
Page 21 of 32
CyberFirst: Ten years of inspiring the next generation of cyber security experts
CyberFirst was launched as an NCSC pilot in 2015, forming part of a wider DCMS strategy to increase cyber security awareness and create a pipeline of talent to the UK workforce.
Its decade-long journey is a testament to the power of collaboration, innovation, and a shared commitment to nurturing the next generation of cyber security professionals. In that time, CyberFirst has become a cornerstone of the UK’s digital skills strategy, and has reached over 350,000 students across the UK, offering them the opportunity to engage in cyber challenges that build essential skills for future careers.
One of the most exciting developments over the last year was the announcement of the next generation of the CyberFirst Girls’ Competition. This will be a collaboration between the NCSC, DSIT and global tech giant IBM, marking a significant milestone in the competition’s evolution that builds on its growing popularity and impact.
In 2024–25, CyberFirst generated £41.4 million in social value— delivering £5.94 for every £1 invested, up from £4.06 the previous year. This rising return reflects the programme’s expanding reach and its role in promoting inclusion, opportunity, and long-term impact across the UK.
CyberFirst moves to TechFirstFollowing the Prime Minister’s announcement at London Tech Week in June 2025, the UK government will invest £187m embedding AI, computer science, cyber security and technology throughout education. The TechFirst programme will be delivered by DSIT, and will build on the proven success of CyberFirst, further strengthening the UK’s position as a global leader in cyber and tech education. |
14K
14,500 girls participated in the CyberFirst Girls Competition in 2025
350K
students engaged across the CyberFirst programme since 2017
Scouts: Digital Citizen Badge
As part of Cyber Security Awareness Month, the NCSC partnered with the Scouts to launch four new activities under the Digital Citizen Badge, aimed at helping young people aged 8 to 14 develop essential cyber security skills. Designed with NCSC experts, the activities focused on creating strong passwords, spotting phishing attempts, protecting personal data, and backing up digital assets and has proven popular with Scout groups across the UK. By equipping Scouts with essential knowledge about online safety, the NCSC is ensuring they can protect themselves against cyber threats and make informed choices in an increasingly digital society.
Higher education
NCSC-certified degree courses help universities to attract high quality students from around the world, and prospective students to make informed choices when considering the hundreds of institutions that now offer cyber security content. Following a thorough assessment by a panel of academic, industry and government experts against NCSC’s high standards, there are now 92 certified degree courses (up 14 from last year), comprising 14 undergraduate, 73 post-graduate and 5 apprenticeships.
Since its launch in 2020, the programme for Academic Centres of Excellence in Cyber Security Education (ACEs-CSE) has recognised UK universities with gold and silver awards for showing their commitment to delivering first-rate cyber security education on campus and to their wider community. 13 universities are now recognised at the gold standard across the UK.
CSE Connect
CSE Connect is a national network of Cyber Security Education (CSE) strategists, practitioners, and learners. Through support from the NCSC, CSE Connect work to promote impactful CSE collaborations, knowledge sharing, skills acquisition, and good practice throughout all key stages of the education 'pipeline'. CSE Connect works closely with government, industry, and academia to establish a culture of innovative cyber security education across the UK. The support from partners has been fundamental to activities nationally and internationally. CSE Connect continues to build opportunities and stronger pathways for current and future generations of cyber practitioners to learn, engage and innovate.
The Cyber Security Body of Knowledge (CyBOK)
Supported by the NCSC and a wide range of national and international collaborators from government, industry and academia, CyBOK has continued to go from strength to strength. CyBOK is the standard for NCSC assured training and forms the basis of the pathways for the 15 specialisms in the Cyber Security Council’s Career Framework. It surpassed 1.5m downloads this year, underpinning the NCSC’s certification of undergraduate and master’s programmes in cyber security.
The CyBOK team has been developing the core Body of Knowledge and mobilising the community to develop additional resources such as hands-on training materials, and guidance and support for learners and educators from schools to FE colleges through to universities and industry training programmes. The CyBOK Community Interest Company was incorporated in November 2024 and will become the long-term home of the CyBOK, providing sustainability and longevity to an 8-year research initiative supported by the National Cyber Security Programme.