Useful things
Resources
Everything on this site traces back to primary sources, and the fastest way to check us is to read them. Here they are, alongside the practical CyPro material providers ask for most.
Primary source
The Code of Practice (PDF)
The December 2022 Telecommunications Security Code of Practice in full: the tiering system, the fourteen concept areas and all the technical measures with their dates.
Read the code
Primary source
Draft Revised Code 2026
The gov.uk collection for the 2026 revision: the draft code, the explanatory memorandum, the change log and the consultation response.
See the revision
Primary source
The Act and the Regulations
The Telecommunications (Security) Act 2021 and the Electronic Communications (Security Measures) Regulations 2022, as enacted, on legislation.gov.uk.
Read the law
Primary source
Ofcom's security report
Ofcom's report on providers' security for October 2024 to October 2025: what supervision actually looked like, and where the regulator's attention is going next.
Read the report
Free download
Cyber Incident Response Plan
CyPro's ready-to-adapt incident response plan with a ransomware runbook: useful groundwork for the Act's remediation and recovery duties.
Get the plan
Sister service
24/7 MDR for telecoms
The monitoring, SIEM and threat hunting capability the March 2027 wave expects, delivered as a managed service by CyPro's UK analysts.
Visit 247mdr.co.uk
Beyond reading
The sources tell you what; a call tells you how
Forty-five minutes with a practitioner turns the code's 258 measures into your shortlist, sequenced around the dates that matter for your tier.