Infosecurity Europe: CyCOS Project Expands to Support UK SMEs as CIISec Takes Over

Why It Matters

Scaling peer‑support networks gives UK SMEs affordable, actionable cyber resilience, closing the gap between awareness and implementation and reducing supply‑chain vulnerability.

Key Takeaways

• CyCOS grows to seven communities, adding five new SME‑led groups.
• CIISec will assume project governance, keeping the peer‑support model.
• Platform provides webinars, AMAs, and asynchronous resources for busy SMEs.
• Only 25% of small UK firms know Cyber Essentials, highlighting education gap.

Pulse Analysis

UK small and medium enterprises face a disproportionate cyber risk, yet surveys show only a quarter of small firms are aware of the government‑backed Cyber Essentials scheme. Budget constraints, limited expertise, and fragmented guidance leave many SMEs vulnerable to supply‑chain attacks. By creating a trusted peer environment, CyCOS addresses the core problem: translating generic awareness into concrete, affordable actions that fit the operational realities of smaller businesses.

The CyCOS model blends synchronous webinars, live "Ask Me Anything" sessions, and an online support‑broker that archives recordings and resources for on‑demand access. Initially piloted by academics from Nottingham, Queen Mary and Kent, the project now expands from two to seven communities, each led by an SME acting as a local beacon. The transition to CIISec ensures professional stewardship while preserving the volunteer‑driven ethos, enabling scalable replication across sectors, regions and supply‑chain networks.

For the broader cybersecurity market, the expansion signals a shift toward community‑centric resilience building. As more SMEs adopt practical controls like multi‑factor authentication and timely patching, the overall attack surface shrinks, benefiting larger enterprises that rely on them. CIISec’s involvement also adds credibility, potentially encouraging more cyber‑service providers to offer transparent, cost‑effective packages. The upcoming Infosecurity Europe panel will showcase how peer‑led frameworks can be a cost‑efficient complement to traditional consultancy, positioning CyCOS as a template for future public‑private collaborations in cyber risk mitigation.