Cyber Resilience Pledge

Cyber Rebels Ltd has signed the UK Government Cyber Resilience Pledge.

The pledge is a public commitment to treat cyber resilience as a leadership responsibility, use trusted national guidance, and take practical steps to improve cyber governance, early warning and supply-chain assurance.

You can read more about the pledge on the GOV.UK Cyber Resilience Pledge page.

Signed pledge declaration

Following the government’s ministerial letter of 13 October 2025, Cyber Rebels Ltd hereby pledge to undertake the following actions, as outlined in the letter:

1. Make cyber a Board responsibility
   
   1. Implement all actions within the Cyber Governance Code of Practice.
   2. Ensure all board members undertake the NCSC’s Cyber Governance Training within three months and then on an annual basis.
2. Sign up to Early Warning
   
   1. Register for the Early Warning service within one month of signing the pledge.
3. Require Cyber Essentials across supply chains
   
   1. Register to the Cyber Essentials Supplier Check Tool within two months of signing the pledge.
   2. Ensure that a comprehensive audit of Cyber Essentials coverage has been conducted across our entire supply chain and that it is presented to and discussed by the Board.
   3. Take a risk-based approach to requiring Cyber Essentials across our supply chain, which may include requiring it from all suppliers. If Cyber Essentials is not required for certain suppliers, the Board will ensure that this decision aligns with our organisation’s risk appetite and strategy, and that adequate assurance is obtained through other means.

In addition to the above three actions, we commit to take the following steps:

1. Encourage these actions within our own supply chains — we will strive to engage with our suppliers to understand and better manage the cyber security risks that they are exposed to through their supply chain and encourage adoption of the above measures.
2. Publish the signed pledge declaration on our website — within two months, we will publish the signed pledge declaration on our company website. Additionally, we will publish an annual public update, either in our annual report or on our company website, on the steps taken to deliver against the pledge.

While the pledge is voluntary, we commit to take positive and meaningful steps to fully implement the three actions. If our company has been unable to implement any of the pledge actions, we will promptly provide DSIT with relevant feedback as to why.

Signed,
Andrew Longhurst
Director of Training & Development
Cyber Rebels Ltd

Date signed: 8 July 2026

What this means for Cyber Rebels

For Cyber Rebels, the pledge is not a badge exercise.

It means cyber resilience is treated as a leadership responsibility, not something left until an incident happens. We will review the digital services and suppliers our work depends on, complete the required governance training, register for relevant national cyber warning services, and publish an annual update on the steps we have taken.

Cyber Rebels will keep this page updated as pledge actions are completed.

Pledge progress updates

1. Cyber Rebels Ltd has submitted the signed Cyber Resilience Pledge declaration to DSIT, and our participation has been confirmed.
2. Cyber Rebels Ltd has registered for the NCSC Early Warning service through MyNCSC and added the domain and IPv4 assets used by the business.
3. Cyber Rebels Ltd has registered for the Cyber Essentials Supplier Check Tool