What the pledge commits firms to
The Department for Science, Innovation and Technology has published a list of businesses and organisations that have signed its Cyber Resilience Pledge, a voluntary scheme under which signatories commit to three actions intended to have an immediate effect on their resilience to cyber attacks. DSIT’s guidance page describes the pledge as a formal commitment by companies to strengthen both their own cyber defences and those of their supply chains.
The pledge was launched at 10 Downing Street on 7 July 2026. DSIT’s page does not spell out the detail of the three actions in the text published alongside the signatory list, but confirms that organisations signing are formalising a commitment that goes beyond general good practice to specific, immediate steps.
Who has signed and what it means
The published list names the organisations that have signed so far, giving UK businesses and their customers a way to check whether a supplier or partner has made the commitment. For UK companies, particularly those in supply chains to larger organisations, signing the pledge is a visible signal to procurement teams and clients that basic cyber resilience steps have been formally adopted, which may matter increasingly in contracts and tenders that reference supplier security standards.
DSIT’s page does not state a closing date for signing, nor does it set out financial support, grants or penalties attached to the pledge. It is a reputational and governance commitment rather than a funded scheme. The department’s guidance points interested businesses to the main Cyber Resilience Pledge page for the pledge’s full terms and a sign-up route.
What is not yet clear
The source material provided does not detail the exact wording of the three actions beyond describing them as having an “immediate positive impact” on resilience, nor does it give a running total of signatories or compare this list with the pledge’s position at launch in July. There is also no indication of any monitoring, audit or enforcement mechanism attached to the pledge, since it is explicitly voluntary.
What to watch next
UK businesses considering supply chain risk should check the DSIT signatory list for existing partners and suppliers, and watch for updates to the list as more organisations sign. Firms weighing whether to sign themselves will need to consult the full pledge text on GOV.UK to see the specific actions required before making a public commitment. Daily Tech Times will follow up if DSIT publishes further detail on take-up numbers or any review of the pledge’s impact.