Cyber Essentials v3.3: what actually changed
Cyber Essentials v3.3 took effect in April 2026. The five controls are unchanged, but cloud services are now definitively in scope. A plain-English tour.
The Foundry Cyber blog
Plain-English writing on cloud security, UK cyber assurance and the standards your customers ask about. No scare tactics, no jargon, no recycled tips.
Cyber Essentials v3.3 took effect in April 2026. The five controls are unchanged, but cloud services are now definitively in scope. A plain-English tour.
The Cyber Resilience Pledge looks like big-business news, but its supply-chain commitment will reach small businesses through customers' procurement teams.
Locking the strongest controls behind the most expensive plan is an industry habit we refuse to copy. Here's what actually changes between our tiers.
What we'll write here, the rules we'll write it by, and why so much security content fails the businesses it claims to help.
Onboarding new customers now
Tell us a bit about your business and what you're worried about. We'll come back with a plain-English view of where you stand and what we'd suggest doing first. Real people, real answers.