UK Unveils £2.5m Programme to Strengthen SME Protection of Intellectual Property

LONDON — The UK government has launched a new £2.5 million initiative to help small and medium-sized enterprises (SMEs) protect their intellectual property (IP) from rising threats posed by cybercriminals and foreign actors. The Secure Innovation Security Review (SISR) scheme will allow up to 500 businesses in sensitive sectors to access tailored cybersecurity and physical protection support for just £500, a fraction of the £2,500 value of the services provided.

The programme, backed by the National Cyber Security Centre (NCSC), the National Protective Security Authority (NPSA), the Department for Business and Trade (DBT), and Innovate UK, is part of a wider push to improve national resilience and secure the UK’s position as a global innovation leader. It will offer one-on-one expert consultations, site audits, employee screening support, and personalized action plans to help companies safeguard critical data and innovation.

Richard Horne, chief executive of the NCSC, stated that hostile states, state-sponsored competitors, and criminal organisations continue to target UK businesses working on cutting-edge technology. He noted that many of these adversaries exploit weak cyber and physical security practices, which can lead to devastating data breaches and loss of competitive edge. Horne stressed that resilience must be at the core of any growth strategy, particularly for firms handling sensitive intellectual property.

The government said the scheme would prioritize SMEs involved in sectors identified as “sensitive” under the National Security and Investment Act 2021 or the government’s Invest 2035 strategy. These include artificial intelligence, life sciences, quantum computing, renewable energy, and semiconductor design. To qualify, businesses must employ fewer than 250 people and demonstrate that they operate in a high-risk field where intellectual property plays a critical role in their value proposition.

Security Minister Dan Jarvis emphasized that the initiative addresses a widespread gap in knowledge and preparedness among SMEs. He said that 98 percent of small businesses report struggling to identify security threats due to limited awareness and expertise. Jarvis added that by giving businesses the right tools and guidance, the SISR scheme would enable them to grow with confidence, even in an increasingly hostile security environment.

The programme arrives as government agencies and intelligence bodies raise concerns about the evolving tactics of state-sponsored cyber attackers. Officials have warned that countries like China have become more sophisticated in their approach, combining digital attacks with human infiltration, insider threats, and strategic partnerships to gain access to confidential information. According to recent data from the NPSA, only 39 percent of previously targeted organisations had implemented even a single basic security control, and 55 percent had not conducted any pre-employment screening of staff.

Innovate UK’s executive director of strategy and performance, Robert Shaw, said the scheme would help startups and spinouts protect their most valuable assets. He added that the SISR programme would also help these businesses demonstrate a strong security posture to investors and customers, further enabling their commercial expansion both domestically and internationally.

Lisa Thompson, CEO of Cambridge-based Genomic Innovations Ltd, welcomed the announcement. Her company, which works on genome sequencing technologies, has been seeking practical support to improve its security infrastructure. She said that the opportunity to receive expert-led audits and risk assessments was “a game-changer” for early-stage firms lacking internal resources.

QuantumSense Ltd, an optical computing startup based in Oxford, said it intends to use the programme to assess and improve its access controls and cybersecurity systems for its prototype lab. The firm noted that having professional input could speed up its path to market by resolving security weaknesses early in the development process.

The Department for Business and Trade will manage applications, which opened on 10 July. Interested companies are encouraged to apply promptly, as the programme is capped at 500 participants and selections will be made on a first-come, first-served basis. Accepted businesses will begin receiving support within weeks of approval.

With the threat landscape continuing to evolve, UK officials have described the SISR scheme as a necessary step to ensure that innovation, particularly from smaller businesses, is not undermined by preventable security breaches. By providing affordable, hands-on assistance, the programme is expected to bolster not only individual enterprises but the nation’s economic and strategic resilience as a whole.