Bill status last checked: 8 August 2026. The Cyber Security and Resilience (Network and Information Systems) Bill has completed all Commons stages and Lords Second Reading. Lords Committee Stage is scheduled to begin on 1 September 2026; future dates may be provisional. Current Parliament version: HL Bill 32, as brought from the Commons. The Bill is not law in force until Royal Assent and commencement. Thresholds, regulator guidance and secondary legislation should be verified against official sources before relying on any compliance position.

Self-serve CSRB and AI governance
intelligence for UK MSPs.

Briefings, toolkits, incident templates, monitoring products, and white-label compliance packs — built for MSP operators who need usable artefacts, not consultancy theatre.

View Products → Download the Free MSP Briefing
FREE INTELLIGENCE BRIEFING

Understand your exposure before you budget

Get the plain-English CSRB briefing: scope thresholds, the three decisions MSP leadership must make now, and what Cyber Essentials doesn't cover. Free. No call required.
Takes 15 minutes to read. Gives you a clear starting position today.

✓ Delivered to your inbox immediately ✓ UK MSPs only — plain English, no padding

The practical requirements MSPs will need to evidence include:

Proposed 24-hour initial incident notification, subject to Royal Assent, commencement and secondary detail
Evidence of appropriate technical and organisational measures
Board accountability and client-facing audit readiness
Report Stage BILL STATUS Parliament Bills API · Commons · 16 June 2026
Proposed RMSP SCOPE Medium and large RMSPs, subject to the Bill and secondary detail
Proposed PENALTY FRAMEWORK CSRB Clause 37 · Harmonised with GDPR Article 83 upper tier
24/72 REPORTING WINDOW Bill provisions; Information Commissioner proposed for RMSPs

Figures based on the Bill and official government factsheets; secondary legislation and consultation detail remain pending  ·  Last reviewed: 8 August 2026

UK-centric monitoring (Parliament → impact) No padded content. Dated snapshots. MSP-specific outputs, not generic GRC. Operational guidance (not legal advice)
CSRB exposure signal

Is your MSP likely to face CSRB scrutiny?

Answer these questions to get a practical exposure signal and the next best action.

60-second self-check

Tick all that apply.
Answer honestly. "We kind of do this" counts as "not yet".

Your result

Exposure signal: awaiting input
LOW = monitor + document boundaries · MEDIUM = clarify scope + pre-stage reporting · HIGH = assume scrutiny + build evidence pack

Complete the self-check to generate a signal.

Your exposure tier and next-best action will update instantly.

Start with CSRB-BRIDGE View the Product Library Choose the relevant toolkit
Scope signal

RMSP

Scope often turns on client dependency and whether your service is "essential" to their operation.

Awaiting input
Reporting

Proposed

Faster reporting expectations mean you need owners, comms templates, and an evidence-ready timeline.

Awaiting input
Enforcement

Proposed

Enforcement risk is driven by scrutiny and assurance demands — penalties are the tail risk.

Awaiting input
Operational Reality Check
If an assurance questionnaire landed tomorrow,
could you defend your exposure position in writing?
Most MSPs are comfortable operationally. Fewer can articulate their regulatory exposure clearly and defensibly.
Can you define whether you are in scope — and why?
Can you evidence your reporting obligations and response windows?
Can you justify your current controls against likely statutory expectations?
Most MSP directors pause on at least one of these.
Start with CSRB-BRIDGE

The regulatory window is open.
Most MSPs are watching it, not preparing for it.

Ready to know exactly where you stand?

Start with the free briefing. Understand your CSRB exposure in plain English, before committing to anything.

Get the Free Briefing →

LIVE SUBSCRIPTION

CSRB-WATCH — LIVE SUBSCRIPTION

CSRB-WATCH is a supervised regulatory monitoring subscription. Each issue is agent-drafted, human-reviewed, versioned, and delivered as a monthly intelligence briefing.

Subscribe to CSRB-WATCH
Entry

Free MSP Briefing

Fast clarity with no commitment — designed to be forwarded internally.

Scope signals (UK MSP context) What changed this month The 3 decisions to make next

Get the Free Briefing
Most popular

CSRB-BRIDGE: Gap Analysis Toolkit

A structured self-serve gap analysis against likely CSRB obligations. Produces a written exposure position you can defend internally.

16 requirement areas, RAG-rated Written exposure position Board briefing template included

Start with CSRB-BRIDGE
Ongoing

CSRB-WATCH

Monthly supervised intelligence briefing, material amendment alerts, versioned changelog.

Monthly supervised intelligence briefing Material amendment alerts Versioned changelog

Subscribe to CSRB-WATCH