The Cyber Action Plan sets out Welsh Government’s vision for Wales to prosper through cyber resilience, talent and innovation. We will help people, businesses and public services reduce the risks of cyber-attacks and build a thriving cyber economy.

Cyber-attacks are a growing threat to businesses of all sizes. Findings from the Cyber Security Breaches Survey 2025, reported that in 2025 43% of UK businesses overall experienced a cyber breach or attack. It is estimated that UK businesses have experienced approximately 8.58 million cyber-crimes of all types including approximately 680,000 non-phishing cyber-crimes during the same period.

Attacks can disrupt operations, compromise sensitive data, and damage reputation.

Wales is fortunate to have several organisations who can help you protect your business against a cyber attack. These include:

• The National Cyber Security Centre, part of GCHQ, is the UK’s technical authority for cyber security. Since 2016, it has worked to make the UK the safest place to live and work online and bring clarity and insight to an increasingly complex online world. The NCSC provides a range of free cyber security tools and services to eligible organisations as part of the Active Cyber Defence (ACD) programme.
• The Cyber Innovation Hub successfully brings together industry, government and other academic partners to grow the Welsh cyber security sector. Funded by Welsh Government and the Cardiff Capital Region, the Cyber Innovation Hub delivers hands-on, NCSC assured cyber security training and immersive, practical cyber incident response activities on cutting edge representative digital systems.
• The Cyber Resilience Centre for Wales (WCRC) is a Police led organisation and is fully funded from Policing and Home Office so the membership and services provided come at no cost to a Welsh business. It offers organisations an affordable way to access cyber security services and membership options depending on what level of support they need. These have been designed to help you identify your vulnerabilities, assess current plans and policies and work with your teams to build overall cyber awareness so ultimately protecting you from an attack.

Free cyber security awareness videos have been developed by the Welsh Government in partnership with Wales Policing - Building Cyber Resilience - YouTube.

Report Cyber Crime

Report a suspicious e-mail

Suspicious e-mail Reporting Service (SERS) enables the public to report suspicious emails by sending them to report@phishing.gov.uk. The service analyses the emails and where found to contain links to malicious sites, seeks to remove those sites from the internet to prevent the harm from spreading. Anyone can use SERS.
 

Action Fraud 

Report cyber crime by contacting the UK’s national reporting centre for fraud and cyber crime if you have been scammed, defrauded or experienced cyber crime: UK's Home for Reporting Cyber Crime & Fraud - Report Fraud.