IntelligenceCyber Essentials April 2026: Mandatory MFA Raises the UK SME Security Baseline
The NCSC and IASME updated Cyber Essentials to v3.3 on 27 April 2026. MFA is now mandatory on all cloud services where available — automatic failure if not enabled. What changed, why it matters, and what UK SMEs need to act on before the deadline.