(MENAFN) Businesses in the UK are being advised to prepare for potential cyber-attacks by keeping physical copies of key plans, with government guidance emphasizing readiness in case computer systems fail.

Recent disruptions caused by hacks have highlighted the risks of relying solely on digital systems. The National Cyber-Security Centre (NCSC) reported a rise in “nationally significant” cyber incidents this year, underscoring the need for contingency measures.

Richard Horne, CEO of the NCSC, stressed that organisations should “have a plan for how they would continue to operate without their IT, (and rebuild that IT at pace), were an attack to get through.” The agency recommends storing plans offline, preferably in paper form, to ensure operations can continue if digital systems are compromised.

High-profile attacks on companies such as Marks and Spencer, The Co-op, and Jaguar Land Rover caused production stoppages and empty shelves earlier this year. While the overall number of cyber incidents in the first nine months of 2025—429—was similar to last year, the severity has increased. Nearly half of this year’s incidents (204) were classified as “nationally significant,” compared with 89 last year.

The NCSC categorizes incidents from Category 1 (national cyber-emergency) to Category 6 (localised incident). Notably, 4% of this year’s incidents (18 attacks) fell into Category 2, “highly significant,” marking a 50% increase for the third consecutive year. While specific attacks are not disclosed, spring assaults on UK retailers like Harrods, The Co-op, and Marks and Spencer are believed to qualify as “Significant incidents.”

Most cyber-attacks are financially motivated, involving ransomware or data extortion, often linked to criminal gangs based in Russia or former Soviet states. There has also been a resurgence of teenage hacking groups in English-speaking countries, with seven teenagers arrested in the UK this year in connection with major attacks.

The government is encouraging organisations to adopt a broader approach beyond cyber-security controls, known as resilience engineering, which focuses on systems that can anticipate, absorb, recover, and adapt to attacks. Businesses are also urged to make use of free NCSC tools and services, such as cyber-insurance for small firms completing the Cyber-Essentials programme.

MENAFN14102025000045017640ID1110192751