<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/">
  <channel>
    <title>Cyber Security and Resilience Bill Blog</title>
    <link>https://cybersecurityandresiliencebill.com/blog</link>
    <description>Latest insights and updates on the Cyber Security and Resilience Bill (CSRB)</description>
    <language>en-GB</language>
    <lastBuildDate>Wed, 28 Oct 2026 13:33:13 GMT</lastBuildDate>
    <atom:link href="https://cybersecurityandresiliencebill.com/rss.xml" rel="self" type="application/rss+xml" />
    <sy:updatePeriod>daily</sy:updatePeriod>
    <sy:updateFrequency>1</sy:updateFrequency>
    <image>
      <url>https://cybersecurityandresiliencebill.com/images/logo.png</url>
      <title>Cyber Security and Resilience Bill Blog</title>
      <link>https://cybersecurityandresiliencebill.com/blog</link>
    </image>
    
    <item>
      <title><![CDATA[Government Defeated on AI Amendment at CSRB Report Stage - First Lords Defeat on the Bill]]></title>
      <link>https://cybersecurityandresiliencebill.com/blog/csrb-report-stage-government-defeated-ai-amendment-october-2026</link>
      <guid>https://cybersecurityandresiliencebill.com/blog/csrb-report-stage-government-defeated-ai-amendment-october-2026</guid>
      <pubDate>Wed, 28 Oct 2026 09:00:00 GMT</pubDate>
      <lastmod>Wed, 28 Oct 2026 09:00:00 GMT</lastmod>
      <description><![CDATA[The Government lost its first division on the Cyber Security and Resilience Bill on 26 October 2026, with peers voting 202-155 to require a review of whether AISI should have pre-deployment audit powers over frontier AI. New AI-agent direction powers were also agreed. Third Reading is expected 2 November 2026.]]></description>
      <content:encoded><![CDATA[undefined]]></content:encoded>
      <dc:creator><![CDATA[Precursor Security]]></dc:creator>
      <category><![CDATA[Compliance]]></category>
      <category><![CDATA[Cyber Security and Resilience Bill]]></category><category><![CDATA[Cyber Security and Resilience Bill 2026]]></category><category><![CDATA[CSRB Report Stage results]]></category><category><![CDATA[Government defeated Lords]]></category><category><![CDATA[AISI audit powers]]></category><category><![CDATA[HL Bill 49]]></category><category><![CDATA[AI-agent direction powers]]></category><category><![CDATA[Third Reading]]></category>
      <enclosure url="https://cybersecurityandresiliencebill.com" type="image/jpeg" />
    </item>
    
    <item>
      <title><![CDATA[Does the Cyber Security and Resilience Bill Apply in Scotland, Wales and Northern Ireland?]]></title>
      <link>https://cybersecurityandresiliencebill.com/blog/cyber-security-resilience-bill-scotland-wales-northern-ireland</link>
      <guid>https://cybersecurityandresiliencebill.com/blog/cyber-security-resilience-bill-scotland-wales-northern-ireland</guid>
      <pubDate>Mon, 12 Oct 2026 09:00:00 GMT</pubDate>
      <lastmod>Mon, 12 Oct 2026 09:00:00 GMT</lastmod>
      <description><![CDATA[The Cyber Security and Resilience Bill (CSRB) is UK-wide legislation that extends to Scotland, Wales and Northern Ireland. This guide explains how it reaches the devolved nations, why Holyrood, the Senedd and the Northern Ireland Assembly are being asked for legislative consent, and what in-scope organisations across the UK should do now.]]></description>
      <content:encoded><![CDATA[undefined]]></content:encoded>
      <dc:creator><![CDATA[Precursor Security]]></dc:creator>
      <category><![CDATA[Compliance]]></category>
      <category><![CDATA[Cyber Security and Resilience Bill]]></category><category><![CDATA[Cyber Security and Resilience Bill 2026]]></category><category><![CDATA[CSRB]]></category><category><![CDATA[CSRB compliance]]></category><category><![CDATA[Scotland]]></category><category><![CDATA[Wales]]></category><category><![CDATA[Northern Ireland]]></category><category><![CDATA[legislative consent]]></category><category><![CDATA[devolution]]></category><category><![CDATA[Sewel convention]]></category><category><![CDATA[territorial extent]]></category><category><![CDATA[competent authorities]]></category><category><![CDATA[UK legislation]]></category><category><![CDATA[compliance]]></category>
      <enclosure url="https://cybersecurityandresiliencebill.com" type="image/jpeg" />
    </item>
    
    <item>
      <title><![CDATA[Cyber Security and Resilience Bill: Lords Report Stage - results and what happens next]]></title>
      <link>https://cybersecurityandresiliencebill.com/blog/cyber-security-resilience-bill-lords-report-stage-october-2026</link>
      <guid>https://cybersecurityandresiliencebill.com/blog/cyber-security-resilience-bill-lords-report-stage-october-2026</guid>
      <pubDate>Tue, 29 Sep 2026 09:00:00 GMT</pubDate>
      <lastmod>Wed, 28 Oct 2026 09:00:00 GMT</lastmod>
      <description><![CDATA[The Government was defeated at Lords Report Stage on 26 October 2026 - peers voted 202-155 to require a review of AISI pre-deployment audit powers over frontier AI. New AI-agent direction powers (Amendment 70) were agreed without division. Third Reading is expected 2 November 2026. Here are the full results and what they mean.]]></description>
      <content:encoded><![CDATA[undefined]]></content:encoded>
      <dc:creator><![CDATA[Precursor Security]]></dc:creator>
      <category><![CDATA[Compliance]]></category>
      <category><![CDATA[Cyber Security and Resilience Bill]]></category><category><![CDATA[Cyber Security and Resilience Bill 2026]]></category><category><![CDATA[Lords Report Stage]]></category><category><![CDATA[HL Bill 49]]></category><category><![CDATA[26 October 2026]]></category><category><![CDATA[frontier AI incident reporting]]></category><category><![CDATA[near-miss reporting]]></category><category><![CDATA[Digital Sovereignty Strategy]]></category><category><![CDATA[vendor-related directions]]></category><category><![CDATA[Computer Misuse Act]]></category><category><![CDATA[Lord Clement-Jones]]></category><category><![CDATA[Baroness Kidron]]></category><category><![CDATA[incident reporting]]></category><category><![CDATA[delegated powers]]></category><category><![CDATA[Royal Assent]]></category><category><![CDATA[UK legislation]]></category><category><![CDATA[compliance]]></category>
      <enclosure url="https://cybersecurityandresiliencebill.com" type="image/jpeg" />
    </item>
    
    <item>
      <title><![CDATA[Cyber Security and Resilience Bill: AI Scope at Lords Committee]]></title>
      <link>https://cybersecurityandresiliencebill.com/blog/cyber-security-resilience-bill-ai-scope-lords-committee</link>
      <guid>https://cybersecurityandresiliencebill.com/blog/cyber-security-resilience-bill-ai-scope-lords-committee</guid>
      <pubDate>Mon, 07 Sep 2026 09:00:00 GMT</pubDate>
      <lastmod>Mon, 14 Sep 2026 09:00:00 GMT</lastmod>
      <description><![CDATA[At Lords Committee Stage this month, the Government rejected calls to pull AI vendors into the Cyber Security and Resilience Bill, now HL Bill 32. The Bill regulates the organisations that use technology to deliver essential and digital services, not the companies that build AI models - so AI risk falls to in-scope entities to manage under their security duties. Here is what was debated in committee, including the rejected AI kill switch, and the steps to take now.]]></description>
      <content:encoded><![CDATA[undefined]]></content:encoded>
      <dc:creator><![CDATA[Precursor Security]]></dc:creator>
      <category><![CDATA[Compliance]]></category>
      <category><![CDATA[Cyber Security and Resilience Bill]]></category><category><![CDATA[artificial intelligence]]></category><category><![CDATA[AI]]></category><category><![CDATA[AI regulation]]></category><category><![CDATA[HL Bill 32]]></category><category><![CDATA[Lords committee stage]]></category><category><![CDATA[Baroness Lloyd of Effra]]></category><category><![CDATA[Lord Clement-Jones]]></category><category><![CDATA[Computer Misuse Act]]></category><category><![CDATA[vulnerability testing]]></category><category><![CDATA[incident reporting]]></category><category><![CDATA[managed service providers]]></category><category><![CDATA[data centres]]></category><category><![CDATA[UK legislation]]></category><category><![CDATA[compliance]]></category>
      <enclosure url="https://cybersecurityandresiliencebill.com" type="image/jpeg" />
    </item>
    
    <item>
      <title><![CDATA[Cyber Security and Resilience Bill: New Powers to Block Risky Suppliers]]></title>
      <link>https://cybersecurityandresiliencebill.com/blog/cyber-security-resilience-bill-vendor-directions-risky-suppliers</link>
      <guid>https://cybersecurityandresiliencebill.com/blog/cyber-security-resilience-bill-vendor-directions-risky-suppliers</guid>
      <pubDate>Wed, 02 Sep 2026 09:00:00 GMT</pubDate>
      <lastmod>Wed, 02 Sep 2026 09:00:00 GMT</lastmod>
      <description><![CDATA[Ahead of Lords Committee Stage, the Government has tabled amendments to the Cyber Security and Resilience Bill (CSRB) creating a new 'vendor-related direction' power - letting ministers order essential and digital service providers to stop buying from, restrict, or remove technology from suppliers judged a national security risk. Here is what it does, how it differs from the Huawei-era telecoms powers, and what your supply chain team should do now.]]></description>
      <content:encoded><![CDATA[undefined]]></content:encoded>
      <dc:creator><![CDATA[Precursor Security]]></dc:creator>
      <category><![CDATA[Compliance]]></category>
      <category><![CDATA[Cyber Security and Resilience Bill]]></category><category><![CDATA[CSRB]]></category><category><![CDATA[CSRB compliance]]></category><category><![CDATA[vendor directions]]></category><category><![CDATA[designated vendor]]></category><category><![CDATA[supply chain security]]></category><category><![CDATA[critical suppliers]]></category><category><![CDATA[national security]]></category><category><![CDATA[UK legislation]]></category><category><![CDATA[House of Lords]]></category><category><![CDATA[HL Bill 32]]></category><category><![CDATA[Lords committee stage]]></category><category><![CDATA[Baroness Lloyd of Effra]]></category><category><![CDATA[data centres]]></category><category><![CDATA[managed service providers]]></category><category><![CDATA[Telecommunications Security Act 2021]]></category><category><![CDATA[AI]]></category><category><![CDATA[Computer Misuse Act]]></category>
      <enclosure url="https://cybersecurityandresiliencebill.com" type="image/jpeg" />
    </item>
    
    <item>
      <title><![CDATA[Cyber Security and Resilience Bill: CAF Readiness Guide]]></title>
      <link>https://cybersecurityandresiliencebill.com/blog/cyber-security-resilience-bill-cyber-assessment-framework-guide</link>
      <guid>https://cybersecurityandresiliencebill.com/blog/cyber-security-resilience-bill-cyber-assessment-framework-guide</guid>
      <pubDate>Wed, 02 Sep 2026 08:00:00 GMT</pubDate>
      <lastmod>Wed, 02 Sep 2026 08:00:00 GMT</lastmod>
      <description><![CDATA[The Cyber Security and Resilience Bill (CSRB) leaves most technical detail to secondary legislation, so what should in-scope organisations do now? Start with the NCSC Cyber Assessment Framework (CAF v4.0). This guide walks through the CAF's four objectives and 14 principles, how to run a baseline self-assessment, and how each part maps to the Bill's incident reporting, supply chain and risk management duties.]]></description>
      <content:encoded><![CDATA[undefined]]></content:encoded>
      <dc:creator><![CDATA[Precursor Security]]></dc:creator>
      <category><![CDATA[Compliance]]></category>
      <category><![CDATA[CSRB]]></category><category><![CDATA[cyber security]]></category><category><![CDATA[UK legislation]]></category><category><![CDATA[compliance]]></category><category><![CDATA[Cyber Assessment Framework]]></category><category><![CDATA[CAF]]></category><category><![CDATA[CAF v4.0]]></category><category><![CDATA[NCSC]]></category><category><![CDATA[GovAssure]]></category><category><![CDATA[incident reporting]]></category><category><![CDATA[near-miss reporting]]></category><category><![CDATA[supply chain]]></category><category><![CDATA[NIS]]></category><category><![CDATA[HL Bill 32]]></category><category><![CDATA[managed service providers]]></category><category><![CDATA[operators of essential services]]></category>
      <enclosure url="https://cybersecurityandresiliencebill.com" type="image/jpeg" />
    </item>
    
    <item>
      <title><![CDATA[The Cyber Security and Resilience Bill Skills Gap: Can UK Firms Resource the New Duties?]]></title>
      <link>https://cybersecurityandresiliencebill.com/blog/csrb-cyber-skills-gap-2026</link>
      <guid>https://cybersecurityandresiliencebill.com/blog/csrb-cyber-skills-gap-2026</guid>
      <pubDate>Tue, 28 Jul 2026 09:00:00 GMT</pubDate>
      <lastmod>Mon, 03 Aug 2026 09:00:00 GMT</lastmod>
      <description><![CDATA[A new think-tank report warns the Cyber Security and Resilience Bill (CSRB) risks becoming a "paper tiger" unless the UK's cyber skills shortage is addressed. With 49% of businesses and 58% of government bodies reporting a basic skills gap, the people needed to run 24/72-hour reporting and ongoing risk management may not be there. Here is what in-scope organisations should do about it before the duties commence.]]></description>
      <content:encoded><![CDATA[undefined]]></content:encoded>
      <dc:creator><![CDATA[Precursor Security]]></dc:creator>
      <category><![CDATA[Compliance]]></category>
      <category><![CDATA[CSRB]]></category><category><![CDATA[cyber security]]></category><category><![CDATA[UK legislation]]></category><category><![CDATA[compliance]]></category><category><![CDATA[cyber skills gap]]></category><category><![CDATA[cyber skills shortage]]></category><category><![CDATA[workforce]]></category><category><![CDATA[HL Bill 32]]></category><category><![CDATA[incident reporting]]></category><category><![CDATA[managed service providers]]></category><category><![CDATA[data centres]]></category><category><![CDATA[public sector]]></category><category><![CDATA[Cyber Assessment Framework]]></category><category><![CDATA[recruitment]]></category><category><![CDATA[managed detection and response]]></category><category><![CDATA[resourcing]]></category>
      <enclosure url="https://cybersecurityandresiliencebill.com" type="image/jpeg" />
    </item>
    
    <item>
      <title><![CDATA[Lords Complete Cyber Security and Resilience Bill Second Reading: Key Themes and Committee Stage on 1 September]]></title>
      <link>https://cybersecurityandresiliencebill.com/blog/csrb-lords-second-reading-complete-committee-stage-september-2026</link>
      <guid>https://cybersecurityandresiliencebill.com/blog/csrb-lords-second-reading-complete-committee-stage-september-2026</guid>
      <pubDate>Wed, 22 Jul 2026 09:00:00 GMT</pubDate>
      <lastmod>Wed, 02 Sep 2026 09:00:00 GMT</lastmod>
      <description><![CDATA[The Lords gave the Cyber Security and Resilience Bill (CSRB), now HL Bill 32, cross-party support at Second Reading on 14 July 2026 without calling a division - but they put five pointed themes on the record, from the public sector exemption to the Bill's total silence on AI. Committee Stage begins on 1 September, and those themes are the working agenda. Here is what each one means for in-scope organisations.]]></description>
      <content:encoded><![CDATA[undefined]]></content:encoded>
      <dc:creator><![CDATA[Precursor Security]]></dc:creator>
      <category><![CDATA[Compliance]]></category>
      <category><![CDATA[CSRB]]></category><category><![CDATA[cyber security]]></category><category><![CDATA[UK legislation]]></category><category><![CDATA[compliance]]></category><category><![CDATA[House of Lords]]></category><category><![CDATA[HL Bill 32]]></category><category><![CDATA[Lords second reading]]></category><category><![CDATA[Lords committee stage]]></category><category><![CDATA[Lord Clement-Jones]]></category><category><![CDATA[Baroness Lloyd of Effra]]></category><category><![CDATA[Baroness Bennett]]></category><category><![CDATA[Lord Alton]]></category><category><![CDATA[Henry VIII powers]]></category><category><![CDATA[delegated powers]]></category><category><![CDATA[AI]]></category><category><![CDATA[digital sovereignty]]></category><category><![CDATA[transnational repression]]></category><category><![CDATA[managed service providers]]></category><category><![CDATA[data centres]]></category><category><![CDATA[incident reporting]]></category><category><![CDATA[NIS]]></category>
      <enclosure url="https://cybersecurityandresiliencebill.com" type="image/jpeg" />
    </item>
    
    <item>
      <title><![CDATA[UK Cyber Resilience Pledge: 60 Firms Commit Ahead of the Cyber Security and Resilience Bill]]></title>
      <link>https://cybersecurityandresiliencebill.com/blog/cyber-resilience-pledge-csrb-2026</link>
      <guid>https://cybersecurityandresiliencebill.com/blog/cyber-resilience-pledge-csrb-2026</guid>
      <pubDate>Thu, 09 Jul 2026 09:00:00 GMT</pubDate>
      <lastmod>Mon, 03 Aug 2026 09:00:00 GMT</lastmod>
      <description><![CDATA[Technology Secretary Liz Kendall launched the Cyber Resilience Pledge at Number 10 on 7 July 2026, and more than 60 organisations signed on day one - M&S, Nationwide, Vodafone, NCC Group and, to some comment, Capita. Each of its three time-bound commitments maps onto a duty that the Cyber Security and Resilience Bill (CSRB), now HL Bill 32, will make mandatory. Here is how to use the voluntary track to get ahead of the statutory one.]]></description>
      <content:encoded><![CDATA[undefined]]></content:encoded>
      <dc:creator><![CDATA[Precursor Security]]></dc:creator>
      <category><![CDATA[Compliance]]></category>
      <category><![CDATA[CSRB]]></category><category><![CDATA[cyber security]]></category><category><![CDATA[UK legislation]]></category><category><![CDATA[compliance]]></category><category><![CDATA[Cyber Resilience Pledge]]></category><category><![CDATA[DSIT]]></category><category><![CDATA[NCSC]]></category><category><![CDATA[Cyber Essentials]]></category><category><![CDATA[supply chain]]></category><category><![CDATA[board governance]]></category><category><![CDATA[HL Bill 32]]></category><category><![CDATA[Cyber Shield]]></category><category><![CDATA[agentic AI]]></category><category><![CDATA[incident reporting]]></category>
      <enclosure url="https://cybersecurityandresiliencebill.com" type="image/jpeg" />
    </item>
    
    <item>
      <title><![CDATA[UK Cyber Breaches Survey 2026: The Cyber Security and Resilience Bill Compliance Gap]]></title>
      <link>https://cybersecurityandresiliencebill.com/blog/csrb-compliance-readiness-breaches-survey-2026</link>
      <guid>https://cybersecurityandresiliencebill.com/blog/csrb-compliance-readiness-breaches-survey-2026</guid>
      <pubDate>Fri, 03 Jul 2026 09:00:00 GMT</pubDate>
      <lastmod>Mon, 03 Aug 2026 09:00:00 GMT</lastmod>
      <description><![CDATA[DSIT's Cyber Security Breaches Survey 2025/2026 put 43% of UK businesses on the wrong end of a breach. The more revealing numbers sit beneath that headline: only 40% told anyone outside the organisation, and only 25% hold a formal incident response plan. Here is what that gap means once the Cyber Security and Resilience Bill (CSRB) makes 24/72-hour reporting a legal duty.]]></description>
      <content:encoded><![CDATA[undefined]]></content:encoded>
      <dc:creator><![CDATA[Precursor Security]]></dc:creator>
      <category><![CDATA[Compliance]]></category>
      <category><![CDATA[CSRB]]></category><category><![CDATA[cyber security]]></category><category><![CDATA[UK legislation]]></category><category><![CDATA[compliance]]></category><category><![CDATA[incident reporting]]></category><category><![CDATA[DSIT]]></category><category><![CDATA[breaches survey]]></category><category><![CDATA[near-miss reporting]]></category><category><![CDATA[cyber resilience]]></category><category><![CDATA[NIS]]></category><category><![CDATA[HL Bill 32]]></category><category><![CDATA[managed service providers]]></category><category><![CDATA[data centres]]></category><category><![CDATA[AI risk]]></category>
      <enclosure url="https://cybersecurityandresiliencebill.com" type="image/jpeg" />
    </item>
    
    <item>
      <title><![CDATA[Cyber Security and Resilience Bill: Lords Second Reading Scheduled for 14 July 2026]]></title>
      <link>https://cybersecurityandresiliencebill.com/blog/csrb-lords-second-reading-14-july-2026</link>
      <guid>https://cybersecurityandresiliencebill.com/blog/csrb-lords-second-reading-14-july-2026</guid>
      <pubDate>Fri, 26 Jun 2026 09:00:00 GMT</pubDate>
      <lastmod>Mon, 03 Aug 2026 09:00:00 GMT</lastmod>
      <description><![CDATA[The House of Lords has fixed 14 July 2026 for its Second Reading of the Cyber Security and Resilience Bill (CSRB), now HL Bill 32, with a dedicated Lords Library briefing published to accompany the debate. Here is what a Lords Second Reading actually does, the reservations peers are most likely to put on the record, and how the remaining stages shape your compliance timeline.]]></description>
      <content:encoded><![CDATA[undefined]]></content:encoded>
      <dc:creator><![CDATA[Precursor Security]]></dc:creator>
      <category><![CDATA[Compliance]]></category>
      <category><![CDATA[CSRB]]></category><category><![CDATA[cyber security]]></category><category><![CDATA[UK legislation]]></category><category><![CDATA[compliance]]></category><category><![CDATA[House of Lords]]></category><category><![CDATA[HL Bill 32]]></category><category><![CDATA[Lords second reading]]></category><category><![CDATA[NIS]]></category><category><![CDATA[secondary legislation]]></category><category><![CDATA[Henry VIII powers]]></category><category><![CDATA[incident reporting]]></category><category><![CDATA[Royal Assent]]></category>
      <enclosure url="https://cybersecurityandresiliencebill.com" type="image/jpeg" />
    </item>
    
    <item>
      <title><![CDATA[Five Eyes AI Warning and the Cyber Security and Resilience Bill: What Boards Must Know]]></title>
      <link>https://cybersecurityandresiliencebill.com/blog/five-eyes-ai-warning-csrb-2026</link>
      <guid>https://cybersecurityandresiliencebill.com/blog/five-eyes-ai-warning-csrb-2026</guid>
      <pubDate>Tue, 23 Jun 2026 09:00:00 GMT</pubDate>
      <lastmod>Mon, 03 Aug 2026 09:00:00 GMT</lastmod>
      <description><![CDATA[In the same week the Cyber Security and Resilience Bill (CSRB) reached the Lords as HL Bill 32, NCSC CEO Richard Horne told RUSI that 75% of the 200-plus CNI incidents it handled were state-linked - and five days later all five Five Eyes agencies warned that AI is compressing threat timelines to months, not years. Two signals, one message for boards: the case for the CSRB is now on the public record, and preparation cannot wait for Royal Assent.]]></description>
      <content:encoded><![CDATA[undefined]]></content:encoded>
      <dc:creator><![CDATA[Precursor Security]]></dc:creator>
      <category><![CDATA[Compliance]]></category>
      <category><![CDATA[CSRB]]></category><category><![CDATA[NCSC]]></category><category><![CDATA[Five Eyes]]></category><category><![CDATA[AI]]></category><category><![CDATA[hostile states]]></category><category><![CDATA[CNI]]></category><category><![CDATA[critical infrastructure]]></category><category><![CDATA[cyber threats]]></category><category><![CDATA[Lords]]></category><category><![CDATA[HL Bill 32]]></category><category><![CDATA[state actors]]></category><category><![CDATA[Richard Horne]]></category><category><![CDATA[RUSI]]></category><category><![CDATA[incident reporting]]></category><category><![CDATA[board responsibility]]></category>
      <enclosure url="https://cybersecurityandresiliencebill.com" type="image/jpeg" />
    </item>
    
    <item>
      <title><![CDATA[Cyber Security and Resilience Bill Clears the Commons: Where It Stands in 2026]]></title>
      <link>https://cybersecurityandresiliencebill.com/blog/cyber-security-resilience-bill-clears-commons-2026</link>
      <guid>https://cybersecurityandresiliencebill.com/blog/cyber-security-resilience-bill-clears-commons-2026</guid>
      <pubDate>Sun, 21 Jun 2026 09:00:00 GMT</pubDate>
      <lastmod>Mon, 03 Aug 2026 09:00:00 GMT</lastmod>
      <description><![CDATA[The Cyber Security and Resilience Bill (CSRB) has cleared every House of Commons stage and passed to the Lords as HL Bill 32. The core architecture survived intact - expanded scope, 24/72-hour reporting, £17m penalties - with one headline change: Ofcom is now the sole regulator for data centres. Here is the confirmed timeline and what to do before Royal Assent, expected late 2026.]]></description>
      <content:encoded><![CDATA[undefined]]></content:encoded>
      <dc:creator><![CDATA[Precursor Security]]></dc:creator>
      <category><![CDATA[Compliance]]></category>
      <category><![CDATA[CSRB]]></category><category><![CDATA[cyber security]]></category><category><![CDATA[UK legislation]]></category><category><![CDATA[compliance]]></category><category><![CDATA[resilience]]></category><category><![CDATA[regulations]]></category><category><![CDATA[NIS]]></category><category><![CDATA[House of Lords]]></category><category><![CDATA[HL Bill 32]]></category><category><![CDATA[Bill 329]]></category><category><![CDATA[Ofcom]]></category><category><![CDATA[data centres]]></category><category><![CDATA[incident reporting]]></category><category><![CDATA[Royal Assent]]></category>
      <enclosure url="https://cybersecurityandresiliencebill.com" type="image/jpeg" />
    </item>
    
    <item>
      <title><![CDATA[The Cyber Security and Resilience Bill 2026: A Definitive Analysis]]></title>
      <link>https://cybersecurityandresiliencebill.com/blog/definitive-guide-cyber-security-resilience-bill-2026</link>
      <guid>https://cybersecurityandresiliencebill.com/blog/definitive-guide-cyber-security-resilience-bill-2026</guid>
      <pubDate>Wed, 14 Jan 2026 09:00:00 GMT</pubDate>
      <lastmod>Wed, 02 Sep 2026 09:00:00 GMT</lastmod>
      <description><![CDATA[The Cyber Security and Resilience Bill (CSRB), which replaces the NIS Regulations 2018, is now through Second Reading, and its four shifts - expanded scope, two-stage reporting, cost recovery and direct supply chain intervention - land on organisations that have never been regulated before. A full analysis of the RMSP and critical supplier definitions, the near miss clause, the 14 principles of the Software Security Code of Practice, and the penalty tiers.]]></description>
      <content:encoded><![CDATA[undefined]]></content:encoded>
      <dc:creator><![CDATA[Precursor Security Team]]></dc:creator>
      <category><![CDATA[Compliance]]></category>
      <category><![CDATA[CSRB]]></category><category><![CDATA[Bill 329]]></category><category><![CDATA[MSP Compliance]]></category><category><![CDATA[Cyber Legislation]]></category><category><![CDATA[Incident Reporting]]></category><category><![CDATA[Government Cyber Action Plan]]></category>
      <enclosure url="https://cybersecurityandresiliencebill.com" type="image/jpeg" />
    </item>
    
    <item>
      <title><![CDATA[The Cyber Security and Resilience Bill: January 2026 Update & Strategic Analysis]]></title>
      <link>https://cybersecurityandresiliencebill.com/blog/cyber-security-resilience-bill-jan-2026-update</link>
      <guid>https://cybersecurityandresiliencebill.com/blog/cyber-security-resilience-bill-jan-2026-update</guid>
      <pubDate>Tue, 13 Jan 2026 15:30:00 GMT</pubDate>
      <lastmod>Mon, 03 Aug 2026 09:00:00 GMT</lastmod>
      <description><![CDATA[The Cyber Security and Resilience Bill (CSRB), Bill 329, passed its Second Reading on 6 January 2026, and the same day the Government announced a £210m Cyber Action Plan for the public sector it has left outside the Bill. For everyone else the direction is set: the Section 9 RMSP designation, a statutory 24-hour clock that most 9-5 IT teams cannot meet, and cost recovery from the victim organisation.]]></description>
      <content:encoded><![CDATA[undefined]]></content:encoded>
      <dc:creator><![CDATA[Precursor Security Team]]></dc:creator>
      <category><![CDATA[Compliance]]></category>
      <category><![CDATA[CSRB]]></category><category><![CDATA[Bill 329]]></category><category><![CDATA[MSP Compliance]]></category><category><![CDATA[Cyber Legislation]]></category><category><![CDATA[Incident Reporting]]></category><category><![CDATA[Strategic Analysis]]></category>
      <enclosure url="https://cybersecurityandresiliencebill.com" type="image/jpeg" />
    </item>
    
    <item>
      <title><![CDATA[Cyber Security and Resilience Bill Introduced to Parliament: Key Changes and What to Expect]]></title>
      <link>https://cybersecurityandresiliencebill.com/blog/cyber-security-resilience-bill-introduced-parliament</link>
      <guid>https://cybersecurityandresiliencebill.com/blog/cyber-security-resilience-bill-introduced-parliament</guid>
      <pubDate>Thu, 13 Nov 2025 09:00:00 GMT</pubDate>
      <lastmod>Mon, 03 Aug 2026 09:00:00 GMT</lastmod>
      <description><![CDATA[The Cyber Security and Resilience Bill (CSRB), Bill 329, was formally introduced to Parliament on 12th November 2025: 61 sections across 5 Parts and 2 Schedules, and the most substantial update to UK cyber security law since the NIS Regulations 2018. This is the section-by-section walkthrough - who the expanded scope catches, exactly what the 24 and 72-hour notifications must contain, and which provisions bite on Royal Assent.]]></description>
      <content:encoded><![CDATA[undefined]]></content:encoded>
      <dc:creator><![CDATA[Precursor Security]]></dc:creator>
      <category><![CDATA[Compliance]]></category>
      <category><![CDATA[CSRB]]></category><category><![CDATA[cyber security]]></category><category><![CDATA[UK legislation]]></category><category><![CDATA[compliance]]></category><category><![CDATA[resilience]]></category><category><![CDATA[regulations]]></category><category><![CDATA[NIS]]></category><category><![CDATA[Parliament]]></category><category><![CDATA[Bill 329]]></category><category><![CDATA[incident reporting]]></category><category><![CDATA[enforcement]]></category>
      <enclosure url="https://cybersecurityandresiliencebill.com" type="image/jpeg" />
    </item>
    
    <item>
      <title><![CDATA[What is the UK Cyber Security and Resilience Bill (CSRB) and Why Should You Care?]]></title>
      <link>https://cybersecurityandresiliencebill.com/blog/what-is-uk-cyber-security-resilience-bill-csrb</link>
      <guid>https://cybersecurityandresiliencebill.com/blog/what-is-uk-cyber-security-resilience-bill-csrb</guid>
      <pubDate>Fri, 29 Aug 2025 09:00:00 GMT</pubDate>
      <lastmod>Wed, 02 Sep 2026 09:00:00 GMT</lastmod>
      <description><![CDATA[The UK Cyber Security and Resilience Bill (CSRB) is the biggest shake-up of UK cyber legislation in years: 5 Parts, 61 sections, and a shift that turns resilience from good practice into a legal obligation. This is the plain-English starting point - who it catches, what it demands, what non-compliance costs, and the three things to do about it now.]]></description>
      <content:encoded><![CDATA[undefined]]></content:encoded>
      <dc:creator><![CDATA[Precursor Security]]></dc:creator>
      <category><![CDATA[Compliance]]></category>
      <category><![CDATA[CSRB]]></category><category><![CDATA[cyber security]]></category><category><![CDATA[UK legislation]]></category><category><![CDATA[compliance]]></category><category><![CDATA[resilience]]></category><category><![CDATA[regulations]]></category><category><![CDATA[NIS]]></category><category><![CDATA[CAF]]></category>
      <enclosure url="https://cybersecurityandresiliencebill.com" type="image/jpeg" />
    </item>
    
  </channel>
</rss>