Stage 1 of 3Your managed services
Lite Edition | Free preliminary screening
The proposed UK Cyber Security and Resilience (Network and Information Systems) Bill could bring additional duties for qualifying MSPs. Your services and responsibilities matter, not simply the equipment you manage.
Read the proposed Bill on the UK Parliament website (opens in a new tab). The Bill may change during its parliamentary passage.
Answer about your MSP, not your customers’ regulatory position.
Assess one managed service at a time. If your services have significantly different responsibilities or delivery arrangements, assess them separately.
Choose I'm not sure when you cannot establish an answer. Leaving a question unanswered is different. You can return to any stage.
The Bill has not yet become law; any duties depend on enactment and commencement. This free screening uses your unverified answers about the proposed ordinary MSP route only. It is not legal advice or a determination of scope, compliance or readiness. Your result is preliminary and subject to the stated limitations. Your organisation remains responsible for establishing its obligations, with qualified advice where needed.
The Cyber Security and Resilience (Network and Information Systems) Bill proposes changes intended to strengthen the security and resilience of networks and IT systems. Qualifying MSPs could face duties such as managing cyber risks and reporting significant incidents.
This screening concerns your MSP, including services delivered to enterprise and public-sector customers. It does not assess those customers.
The text, legislative status and commencement must be checked against authoritative UK Parliament and government sources before relying on a future indication. No legal obligation or date is assumed here.
A separately commissioned professional assessment can review evidence and document findings. A readiness assessment requires its own agreed scope.