The National Cyber Security Centre (NCSC) provides an ‘Exercise in a Box’ online tool that can help businesses check how resilient they are to cyber attacks as well as practise their response in a safe environment.
The tool will give you some exercises that can be carried out in your own time as many times as you want. The exercises include:
-A ransomware attack delivered by phishing email;
-Mobile phone theft and response;
-Being attacked from an unknown Wi-Fi network;
-Insider threat leading to a data breach;
-Third party software compromise;
-Threatened leak of sensitive data;
-Home & remote working; and
-Managing a vulnerability disclosure.
Micro-exercises are also included, covering areas like use of passwords and identifying and reporting a suspected phishing email.
To use ‘Exercise in a Box’ you need to register for an account with NCSC, and you’ll be provided with a tailored report that helps you to identify what to do next and sets out where you can find helpful guidance.
See: https://www.ncsc.gov.uk/information/exercise-in-a-box
HMRC have clarified the position on Self Assessment tax return reporting requirements for directors of close companies and updated their guidance for directors of charities.
HMRC have updated guidance on UK VAT refunds for non-UK businesses in a VAT group. Revenue & Customs Brief 10 (2026) explains changes to how non-UK businesses in a VAT group should make future UK VAT refund claims and the transitional arrangements. It also explains how to ask HMRC to reconsider claims made since 1 January 2021 that have been refused.