Phoenix signs the Government Cyber Resilience Pledge

What is the Government Cyber Resilience Pledge? 

The government issued a ministerial letter on 13th October 2025, asking organisations to strengthen their cyber resilience. DSIT and the NCSC launched this pledge in response. 

The pledge is voluntary. Signatories commit to three core actions, plus a small number of supporting steps. Phoenix has signed up to all of them. 

What Phoenix has committed to

1. Make cyber a Board responsibility

• Implement every action in the NCSC’s Cyber Governance Code of Practice
• Every board member completes the NCSC’s Cyber Governance Training within three months, then annually

2. Sign up to Early Warning

• Register for the NCSC’s Early Warning service within one month of signing

3. Require Cyber Essentials across our supply chain

• Register with the Cyber Essentials Supplier Check Tool within two months
• Audit Cyber Essentials coverage across our supply chain and present the findings to the Board
• Take a risk-based approach, backed by other assurance where Cyber Essentials isn’t required

Wider commitments

Beyond the three core actions, we’re also committing to:

• Encourage our suppliers to understand and manage their own cyber risks
• Publish our signed declaration on our website, with an annual public update on our progress