TEC-Specific Cyber Risks & Incident Management

Sector Risk and Innovation Group (SRIG) Lead - Stuart Ellis, Head of IT, at Taking Care

Innovation and Challenge Group (ICG) Members

​Purpose (Objective)

• The world's number 1 business risk is Cyber; therefore this programme aims to identify and address specific cyber risks in the TEC sector and provide mitigation guidelines as an output.
• To include dispersed, proactive and preventative solutions.
• Follow-on work aims to provide comprehensive incident management guidance during a Cyber incident, with recommendations for quality standards amendments where appropriate.

Work Programme Update (November 2026)

This ICG project focused on identifying and addressing cyber risks affecting the TEC sector and developing practical guidance to support risk mitigation and incident management.

The group completed its core deliverables, including a cyber security compliance standards table, an incident response playbook and supporting incident management templates. These resources were formally accepted for dissemination on 23 July 2026, marking the conclusion of the workstream.

The work built on earlier risk assessments and gap analysis, which identified opportunities to strengthen cyber incident management across the sector. The completed resources were designed to help TEC organisations prepare for, respond to and manage cyber security incidents, supporting service continuity and resilience.