NCSC Annual Review 2025
Looking back at the National Cyber Security Centre's ninth year and its key developments and highlights, between 1 September 2024 and 31 August 2025.
Page 6 of 32
Message from Director GCHQ
This year, the realities of cyber attacks have hit the headlines and impacted the bottom lines of many companies. Incidents like the high-profile attacks on Marks & Spencer, the Co-op Group and Jaguar Land Rover serve as a stark reminder that the cyber threat is not just an abstract concept but a real one with real-world costs.
The importance of vigilance, resilience and the collective responsibility to defend against an increasingly complex threat is clear. Cyber security is a matter of business survival that demands action.
I am immensely proud of the entire NCSC team for their exceptional efforts in safeguarding the UK’s digital landscape. Their expertise and dedication are an asset to the country. Their work continues to raise awareness, build expertise and reinforce the security of our national infrastructure. But cyber security is a shared responsibility – an obligation for individuals, businesses, and government alike to ensure a more secure digital future for everyone.
It’s time to act. We must all play our part and take decisive steps.
Don’t be an easy target; prioritise cyber risk management, embed it into your governance, and lead from the top.