Skip to main content

Government Cyber Resilience Pledge

Our Cyber Resilience Pledge

Made Purple has signed the UK Government Cyber Resilience Pledge. We have committed to put cyber risk on the Board agenda, sign up to the NCSC Early Warning service and require Cyber Essentials across our supply chain.

Signed by
George Kyriacou, Founder
Date signed
In response to
Ministerial letter of 13 October 2025

The three actions we have committed to

The pledge asks organisations that supply government to take three practical steps to strengthen their cyber resilience. Here is what each one means for us.

Already in place

  • Registered for the NCSC Early Warning service
  • Registered with the Cyber Essentials Supplier Check Tool
  • Cyber Essentials Plus certified and renewed every year
  • NCSC Cyber Governance Training completed by our Board

Action 2: Sign up to Early Warning

We receive NCSC alerts about threats and vulnerabilities affecting our networks.

Action 3: Require Cyber Essentials across our supply chain

The suppliers we rely on are held to a recognised security baseline.

  • Register with the Cyber Essentials Supplier Check Tool within two months of signing the pledge.

    In placeCyber Essentials Supplier Check Tool (opens in new window)

  • Conduct a comprehensive audit of Cyber Essentials coverage across our entire supply chain and present it to the Board for discussion.

  • Take a risk-based approach to requiring Cyber Essentials from our suppliers. Where it is not required, the Board will make sure the decision fits our risk appetite and strategy and that we get adequate assurance by other means.

Going further

Alongside the three actions, we have made two further commitments. Our own certifications are set out on our security and compliance page.

Encourage these actions in our own supply chain

We will engage with our suppliers to understand and better manage the cyber security risks they are exposed to through their own supply chains and encourage them to adopt the same measures.

Publish the pledge and report on progress

We publish the signed declaration on this page and will publish a public update every year on the steps we have taken to deliver against the pledge.

Our signed declaration

The full text of the declaration we signed is set out below. You can also download the signed copy.

Declaration

Government Cyber Resilience Pledge

Following the government's ministerial letter of 13 October 2025, Made Purple Ltd hereby pledge to undertake the following actions, as outlined in the letter:

  1. Make cyber a Board responsibility:

    • Implement all actions within the Cyber Governance Code of Practice.
    • Ensure all board members undertake the NCSC's Cyber Governance Training within three months and then on an annual basis.

  2. Sign up to Early Warning:

    • Register for the Early Warning service within one month of signing the pledge.

  3. Require Cyber Essentials across supply chains:

    • Register to the Cyber Essentials Supplier Check Tool within two months of signing the pledge.
    • Ensure that a comprehensive audit of Cyber Essentials coverage has been conducted across our entire supply chain and that it is presented to and discussed by the Board.
    • Take a risk-based approach to requiring Cyber Essentials across our supply chain (which may include requiring it from all suppliers). If Cyber Essentials is not required for certain suppliers, the board will ensure that this decision aligns with our organisation's risk appetite and strategy and that adequate assurance is obtained through other means.

In addition to the above three actions, we commit to take the following steps:

  • Encourage these actions within our own supply chains: we will strive to engage with our suppliers to understand and better manage the cyber security risks that they are exposed to through their supply chain and encourage adoption of the above measures.
  • Publish the signed pledge declaration on our website: within 2 months, we will publish the signed pledge declaration on our company website. Additionally, we will publish an annual public update, either in our annual report or on our company website, on the steps taken to deliver against the pledge.

While the pledge is voluntary, we commit to take positive and meaningful steps to fully implement the three actions. If our company has been unable to implement any of the pledge actions, we will promptly provide DCMS with relevant feedback as to why.

Signed,

George Kyriacou

Founder, Made Purple Ltd

Download signed declaration (PDF)

Progress against the pledge

We will publish an update here every year on the steps we have taken to deliver the pledge.

Our first annual update is due by 5 November 2027.

Questions about our pledge or our security posture? Email [email protected].