Small and medium-sized enterprises (SMEs) in the UK are constantly facing risks from cyber threats and IT concerns. 43% of UK businesses experienced a cyber-attack in the past year.
Trying to grow your business is hard enough for these companies without the damage a cyberattack or data breach could cause.
That’s why Innovate UK is running the Secure Innovation Security Review Scheme, designed to support early-stage, innovative UK businesses in strengthening their protective security measures.
What is the scheme?
The scheme offers UK-registered SMEs a high-level independent review of their security posture.
The focus is on protective security: governance, culture, risk management, supply chain resilience, cybersecurity, incident management, and more.
Firms that choose to apply receive expert guidance from approved security reviewers who work within an established framework developed by the National Protective Security Authority (NPSA) and the National Cyber Security Centre (NCSC).
Who is it for?
As mentioned previously, it’s focused on SMEs in the UK, particularly companies operating in high-sensitivity or high-growth technology sectors.
What counts as a “ high-sensitivity or high-growth technology sector”? Well, businesses must operate in one of the industries specified under the National Security and Investment Act list, which includes, but is not limited to:
- Advanced materials
- Semiconductors
- AI quantum
- Space defence
- Data infrastructure
Alternatively, businesses that are in one of the sectors aligned with the UK Government’s Industrial Strategy can also apply for the scheme.
Applicants must also commit £500 of their own funding (including VAT), with the remaining cost (£2,500) funded by the scheme.
What does the review cover?
The review assesses an organisation’s overall protective security across several pillars, which include:
- Governance of protective security (policies, leadership)
- Security culture
- Risk management
- Cybersecurity
- Incident management, including preparedness and response
Benefits to businesses
Beyond the review itself, the scheme offers additional value: a £300 voucher toward the UK Government-backed Cyber Essentials certification (the NCSC-recommended baseline cyber standard) upon submission of the review report.
The funding support means a business pays £500 and receives a £3,000-worth review (with £2,500 covered by the scheme).
How to apply and important details
Applications are open until the end of the 2025-26 financial year or until the 500 total places have been filled, whichever comes first, so it’s crucial that you apply quickly.
Awards are given on a first-come, first-served basis.
After approval, the business selects an approved Security Reviewer from the provided list, completes preparatory work, and arranges a site visit.
A final report must be submitted on schedule to retain funding.
A final thought
UK tech small and medium-sized businesses (SMEs) can get a great deal on expert security reviews through the Secure Innovation Security Review Scheme.
If your company is in the right industry and wants to boost its security, this scheme is a fantastic opportunity. You’ll get an independent review, practical advice, and a head start on getting Cyber Essentials certification.
Spots are limited and first-come, first-served, so it’s a good idea to apply soon. If your business requires any cybersecurity or IT support, regardless of the scheme, you can contact CloudTech24 here
