Bill status last checked: 14 July 2026. The Cyber Security and Resilience (Network and Information Systems) Bill has completed all Commons stages and is before the House of Lords — Second Reading was listed for debate on 14 July 2026, with Committee Stage to follow (dates not yet announced). Current Parliament version: HL Bill 32, as brought from the Commons. The Bill is not law in force until Royal Assent and commencement. Thresholds, regulator guidance and secondary legislation should be verified against official sources before relying on any compliance position.

Self-serve CSRB and AI governance
intelligence for UK MSPs.

Briefings, toolkits, incident templates, monitoring products, and white-label compliance packs — built for MSP operators who need usable artefacts, not consultancy theatre.

View Products → Download the Free MSP Briefing
FREE INTELLIGENCE BRIEFING

Understand your exposure before you budget

Get the plain-English CSRB briefing: scope thresholds, the three decisions MSP leadership must make now, and what Cyber Essentials doesn't cover. Free. No call required.
Takes 15 minutes to read. Gives you a clear starting position today.

✓ Delivered to your inbox immediately ✓ UK MSPs only — plain English, no padding

The practical requirements MSPs will need to evidence include:

24-hour incident notification to the ICO compliance requirement
Evidence of appropriate technical and organisational measures
Board accountability and client-facing audit readiness
Report Stage BILL STATUS Parliament Bills API · Commons · 16 June 2026
~1,214 MSPs IN DIRECT SCOPE CSRB Clause 2 RMSP definition · CompTIA UK MSP data (2024)
£17M MAXIMUM FINE CSRB Clause 37 · Harmonised with GDPR Article 83 upper tier
24hr REPORTING WINDOW CSRB Clause 14(2) · ICO as primary enforcement authority

Figures based on CSRB Bill text, CompTIA UK data, and ICO guidance, as drafted — secondary legislation pending  ·  Last reviewed: June 2026

UK-centric monitoring (Parliament → impact) No padded content. Dated snapshots. MSP-specific outputs, not generic GRC. Operational guidance (not legal advice)
CSRB exposure signal

Is your MSP likely to face CSRB scrutiny?

Answer these questions to get a practical exposure signal and the next best action.

60-second self-check

Tick all that apply.
Answer honestly. "We kind of do this" counts as "not yet".

Your result

Exposure signal: awaiting input
LOW = monitor + document boundaries · MEDIUM = clarify scope + pre-stage reporting · HIGH = assume scrutiny + build evidence pack

Complete the self-check to generate a signal.

Your exposure tier and next-best action will update instantly.

Start with CSRB-BRIDGE View the Product Library Choose the relevant toolkit
Scope signal

RMSP

Scope often turns on client dependency and whether your service is "essential" to their operation.

Awaiting input
Reporting

24hr

Faster reporting expectations mean you need owners, comms templates, and an evidence-ready timeline.

Awaiting input
Enforcement

£17m

Enforcement risk is driven by scrutiny and assurance demands — penalties are the tail risk.

Awaiting input
Operational Reality Check
If an assurance questionnaire landed tomorrow,
could you defend your exposure position in writing?
Most MSPs are comfortable operationally. Fewer can articulate their regulatory exposure clearly and defensibly.
Can you define whether you are in scope — and why?
Can you evidence your reporting obligations and response windows?
Can you justify your current controls against likely statutory expectations?
Most MSP directors pause on at least one of these.
Start with CSRB-BRIDGE

The regulatory window is open.
Most MSPs are watching it, not preparing for it.

Ready to know exactly where you stand?

Start with the free briefing. Understand your CSRB exposure in plain English, before committing to anything.

Get the Free Briefing →

COMING SOON

CSRB-WATCH — Coming soon

Supervised monthly regulatory monitoring for UK MSPs. Join the Free MSP Briefing to receive launch news and material regulatory updates.

Get the Free MSP Briefing
Entry

Free MSP Briefing

Fast clarity with no commitment — designed to be forwarded internally.

Scope signals (UK MSP context) What changed this month The 3 decisions to make next

Get the Free Briefing
Most popular

CSRB-BRIDGE: Gap Analysis Toolkit

A structured self-serve gap analysis against likely CSRB obligations. Produces a written exposure position you can defend internally.

16 requirement areas, RAG-rated Written exposure position Board briefing template included

Start with CSRB-BRIDGE
Ongoing

CSRB-WATCH

Monthly supervised intelligence briefing, material amendment alerts, versioned changelog.

Monthly supervised intelligence briefing Material amendment alerts Versioned changelog

Subscribe to CSRB-WATCH