Who's Affected by CSRB

Is Your Organisation In Scope for CSRB?

The UK's Cyber Security and Resilience Bill expands regulation to many previously unregulated sectors. Learn if your organization falls within scope.

Organisations Affected by CSRB

Select your organisation type below to understand how the Cyber Security and Resilience Bill will affect you.

Managed Service Providers

MSPs with access to client networks and IT systems now face regulatory oversight.

Sector Overview

Managed Service Providers (MSPs) deliver critical IT and security services to businesses and public sector organisations.

High-Value Target: MSPs often have privileged access to client systems, data, and infrastructure - making them a high-value target for cyber attacks.

Why MSPs Are In Scope

Under CSRB, MSPs are formally recognised as digital service providers due to the systemic risks they pose to the organisations they support.

You're likely in scope if you:
  • Provide IT services to regulated sectors (healthcare, finance, government)
  • Have administrative access to client networks or critical systems
  • Support essential services or critical infrastructure operators
  • Manage security tools, backups, or business continuity systems

Key Requirements & Obligations

Security Framework
  • Implement the NCSC Cyber Assessment Framework (CAF)
  • Maintain robust access controls and monitoring
  • Secure your own supply chain and third-party integrations
Incident Response
  • Report major incidents to regulators within 24 hours
  • Notify affected clients immediately
  • Maintain detailed incident logs and response procedures

Risks of Non-Compliance

  • Loss of contracts with regulated clients
  • Exclusion from government and enterprise procurement
  • Regulatory fines and enforcement action
  • Reputational damage affecting client trust
  • Increased liability and insurance costs

Competitive Advantages of Compliance

  • Differentiate from non-compliant competitors
  • Access to high-value regulated sector contracts
  • Enhanced client trust and retention
  • Reduced cyber risk and incident costs

How Precursor Can Help

Our expert team helps organisations implement and prove compliance with CSRB - and do so in a way that enhances security without slowing innovation.

Talk to Experts