Cyber PATH

What Cyber PATH does

Cyber PATH is a national student talent pipeline programme operated by the National Cyber Resilience Centre Group (NCRCG), a not-for-profit private company limited by guarantee (Company No. 13027672) founded in 2021 and headquartered in London. The programme recruits students studying cyber-related courses from 42 universities across England and Wales and places them alongside senior cyber security practitioners to deliver four core cyber resilience service modules — Security Awareness Training, Microsoft 365 Service Assessment, Internal Vulnerability Assessments, and Policy Reviews — to small and medium-sized enterprises (SMEs). Service delivery is organised through nine regionally-mapped Cyber Resilience Centres, each aligned to a Regional Organised Crime Unit, providing trusted, locally-tailored cyber support across England and Wales.

The underlying operating model is a community-led coalition rather than a commercial product platform: services are funded by the Home Office for SMEs and supported by National Ambassador contributions from enterprise partners (NatWest, Mastercard, Microsoft, CGI, CyberSmart, Chainalysis, MBDA). NCRCG operates nine regional subsidiary companies (e.g., Eastern CRC, South West CRC, West Midlands CRC) that act as regional delivery entities, while NCRCG itself provides national coordination, policing oversight via City of London Police and the NPCC, and technical authority linkage to the NCSC. There is no disclosed SME-facing pricing and no commercial revenue model — the organisation explicitly functions as a not-for-profit mission delivery vehicle. The accompanying CyberVersed podcast, hosted by Mandy Haeburn-Little, and the National Ambassador Programme serve as thought-leadership and ecosystem-buildout channels.

The strategic problem Cyber PATH addresses is the UK's dual cyber resilience gap: SMEs lack affordable access to cyber support (30,000+ have been engaged; 23,500+ made measurably more resilient), while the UK faces a chronic cyber skills shortage that the 42-university student pipeline is designed to fill. Large enterprise customers (the National Ambassadors) use the programme to harden their SME supply chains. Governance sits with the City of London Police and an oversight board; the organisation has no parent company, no external equity investors, and no public listing.

Name

Cyber PATH

Legal name

NATIONAL CRC GROUP LIMITED

Website

https://nationalcrcgroup.co.uk

Company type

Private

Founded year

2021

Operating status

Operating

Headcount range

11–50 employees

Short description

Cyber PATH is a UK police-led student talent pipeline programme operated by the National Cyber Resilience Centre Group, placing university students alongside senior practitioners to deliver cyber resilience services — security training, vulnerability assessments, M365 reviews, and policy audits — to SMEs across England and Wales through nine regional Cyber Resilience Centres.

Ownership category

akta.pro rank

Product category

Cybersecurity Services

NAICS

Computer Training (611420), Business Schools and Computer and Management Training (6114), Educational Support Services (611710)

SIC

Services-Educational Services (8200)

akta.pro primary industry

Cybersecurity Training & Awareness Programs (BPAEANAF)

akta.pro secondary industries

Cybersecurity Technical Skills (Security Engineering, SOC, Pen Testing) (EDABAFAF), IT, Software & Cybersecurity Training (EDAGANAF)

Keywords

• Cyber resilience services
• Student talent pipeline
• SME cyber support
• Security awareness training
• Vulnerability assessment services

Headquarters

HQ city

London

HQ country

United Kingdom

HQ region

Europe

Offices4 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure

Revenue model

1. Government Funding: Home Office funds the service delivery for SMEs. National Ambassador Programme funds the service provision. This is a not-for-profit initiative.
2. National Ambassador Contributions: Financial contributions from National Ambassador companies support the programme operations and regional CRC sustainability

Go-to-market motion1 record

Distribution channels3 records

Marketing channels5 records

Core offering

Cyber PATH is a national student talent pipeline programme that recruits university students studying cyber-related courses to work alongside senior cyber security practitioners, delivering cyber resilience services to small and medium-sized enterprises across England and Wales. The programme is delivered through 9 regional Cyber Resilience Centres in partnership with 42 universities, offering Security Awareness Training, Microsoft 365 Service Assessment, Internal Vulnerability Assessment, and Policy Review services to SMEs at no direct cost.

Product overview

Cyber PATH (Cyber Resilience Centre PATH) is a student talent pipeline programme operated by the National Cyber Resilience Centre Group (NCRCG) across nine regional Cyber Resilience Centres in England and Wales, in partnership with 42 universities. The programme recruits students studying cyber-related courses to work alongside senior cyber security practitioners, delivering a suite of cyber resilience services to small and medium-sized organisations (SMEs/SMOs). The core offering consists of four distinct service modules: Security Awareness Training, Microsoft 365 Service Assessment, Internal Vulnerability Assessment, and Policy Review. Students gain real-world experience while providing SMEs with accessible, affordable cyber security support tailored to their size and resource constraints. The programme is complemented by the CyberVersed Podcast, which serves as a thought leadership platform featuring strategic conversations with industry leaders on cyber resilience topics.

Differentiator

Problem solved

Functional benefit

Brands

• CyberVersed Podcast: Strategic conversations with industry leaders in the UK's cyber resilience landscape, hosted by Mandy Haeburn-Little.
• National Ambassador Programme
• Student Talent Pipeline / Cyber PATH

Named customers3 records

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature2 records

Partnerships

Seven partnerships are on record, tiered core.

• ChainalysiscoreStrategic or Co-development Partner · 13 October 2025Chainalysis collaborated with Cyber PATH on the Crypto Capstone initiative, providing blockchain intelligence expertise and supporting the student talent pipeline with industry insights on cryptocurrency and cyber threats.
• 42 Universities (CRC Network)coreStrategic or Co-development PartnerUniversities across England and Wales work with regional CRCs to handpick talented students for the Cyber PATH programme. Students work alongside senior cyber security practitioners to deliver services to SMEs.
• 9 Regional Cyber Resilience CentrescoreStrategic or Co-development PartnerRegional centres operate across England and Wales mapped to Regional Organised Crime Units, delivering tailored cyber resilience services to SMEs and supporting the Cyber PATH student programme.
• Home OfficecoreOthersHome Office provides funding for the service delivery of Cyber PATH services to SMEs across England and Wales.
• City of London PolicecoreStrategic or Co-development PartnerCity of London Police provides policing leadership and oversight for NCRCG and the CRC Network, including the Cyber PATH programme.
• National Police Chiefs' Council (NPCC)coreStrategic or Co-development PartnerNPCC provides national coordination for cybercrime programme including oversight of Cyber PATH and CRC Network.
• National Cyber Security Centre (NCSC)coreStrategic or Co-development PartnerNCSC serves as the national technical authority for cyber security, providing guidance and support that Cyber PATH signposts to SMEs.

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Others

• (ISC)²: Global cyber security professional certification body. Comparable to Cyber PATH's talent development mission through professional credentialing, but operates internationally and targets experienced practitioners rather than students.

Broad incumbents

• CREST: UK-based accreditation body for cyber security companies and professionals. Comparable as a UK cyber ecosystem standards organisation, though focused on accrediting providers rather than delivering SME-facing services.
• SANS Institute: Global cyber security training and certification organisation covering technical and awareness tracks. Comparable as a deep cyber training provider, but targets professionals and enterprises rather than SMEs directly.
• National Cyber Security Centre (NCSC): UK's national technical authority for cyber security, part of GCHQ. Comparable as the apex UK cyber body that NCRCG signposts SMEs to and coordinates with, though NCSC focuses on national-level guidance rather than direct SME delivery.
• KnowBe4: Global leader in security awareness training and simulated phishing, addressing the same SME awareness training use case as Cyber PATH's Security Awareness Training module at global scale via a SaaS model.

Direct peers

• CyberSmart: UK-based commercial cyber security platform providing affordable cyber security, vulnerability scanning, and policy tools to SMEs. Highly comparable as it addresses the same SME customer with overlapping services (awareness training, assessments, policy), and is also a current NCRCG National Ambassador.
• IASME Consortium: UK not-for-profit that operates the Cyber Essentials and IASME Governance certification schemes for SMEs. Directly comparable because NCRCG signposts SMEs to Cyber Essentials, putting both organisations on the same SME cyber assurance pathway.

Emerging players

• CAPSLOCK: UK cyber security reskilling bootcamp that trains adult learners into cyber roles. Comparable to Cyber PATH's student talent pipeline mission, but targets career-changers rather than university students and operates as a commercial training provider.
• CybSafe: UK-based cyber security awareness and behaviour platform serving enterprise and SME markets. Directly overlaps with Cyber PATH's Security Awareness Training module, but delivers via a SaaS product rather than student-led services.

Regional players

• Scottish Business Resilience Centre: Scotland's analogue of the regional Cyber Resilience Centres, providing cyber resilience advice and services to Scottish SMEs. Closely comparable structurally to NCRCG's regional model but operating in a different UK nation.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/ncrcg-cyber-path

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Subsidiaries9 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Cyber PATH