Cyber Security Training for UK Businesses

Only 19% of UK businesses provided cyber security training or awareness-raising activities to staff in the last 12 months.

For micro businesses, that figure falls to just 14%.

Cyber security training by UK business size: 14% of micro businesses, 33% of small businesses, 54% of medium businesses and 84% of large businesses. — Percentage of UK businesses that had cyber security training or awareness-raising sessions in the previous 12 months.
Source: UK Government, Cyber Security Breaches Survey 2025/2026

The figures show a clear difference by business size, with cyber security training becoming considerably more common as organisations grow.

Cyber security isn't only a technical issue.

Policies and technical controls are important, but employees also need to understand the risks they encounter in their day-to-day work — from phishing and passwords to handling information and reporting incidents.

At Cirela Digital, we help organisations develop practical governance and policies that support secure ways of working.

Good governance shouldn't simply exist as a set of documents. Policies need to reflect how an organisation actually works, clearly define staff responsibilities, and provide a foundation for effective awareness and training.

Find out more about our Governance & Policies services .