--- title: "Lock the Door: Cyber Essentials meets Offline | Firevault" description: "The Government urges businesses to lock the digital door on cyber criminals through Cyber Essentials. But defence is not resilience. For the data that matters…" lang: en-GB json-ld: | [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": "GB" } ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "knowsAbout": [ "Offline Secure Storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/learn/knowledge/lock-the-door-cyber-essentials-offline-storage#webpage", "url": "https://fire-vault.com/learn/knowledge/lock-the-door-cyber-essentials-offline-storage", "name": "Lock the Door: Cyber Essentials meets Offline", "description": "The Government urges businesses to lock the digital door on cyber criminals through Cyber Essentials. But defence is not resilience. For the data that matters…", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "/assets/lock-the-digital-door-campaign-BOdDEpwX.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/learn/knowledge/lock-the-door-cyber-essentials-offline-storage#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/learn/knowledge/lock-the-door-cyber-essentials-offline-storage#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Learn", "item": "https://fire-vault.com/learn" }, { "@type": "ListItem", "position": 3, "name": "Knowledge Vault", "item": "https://fire-vault.com/learn/knowledge" }, { "@type": "ListItem", "position": 4, "name": "Lock the Digital Door, Turn the Power Off: Defence and Resilience Explained", "item": "https://fire-vault.com/learn/knowledge/lock-the-door-cyber-essentials-offline-storage" } ] }, { "@context": "https://schema.org", "@type": "Article", "headline": "Lock the Digital Door, Turn the Power Off: Defence and Resilience Explained", "description": "The Government urges businesses to lock the digital door on cyber criminals through Cyber Essentials. But defence is not resilience. For the data that matters most, physical disconnection ensures it survives when defences fail.", "url": "https://fire-vault.com/learn/knowledge/lock-the-door-cyber-essentials-offline-storage", "image": "/assets/lock-the-digital-door-campaign-BOdDEpwX.jpg", "author": { "@type": "Person", "name": "Mark Fermor", "worksFor": { "@id": "https://fire-vault.com/#organization" }, "url": "https://fire-vault.com/why-oss/about" }, "publisher": { "@id": "https://fire-vault.com/#organization" }, "datePublished": "2026-03-24T00:00:00.000Z", "dateModified": "2026-03-24T00:00:00.000Z", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://fire-vault.com/learn/knowledge/lock-the-door-cyber-essentials-offline-storage" }, "inLanguage": "en-GB", "articleSection": "Insight", "isAccessibleForFree": true, "copyrightHolder": { "@id": "https://fire-vault.com/#organization" }, "copyrightYear": 2026 } ] --- Recent Breaches Breaches [2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Lidl GB Customer contact data ](https://www.theguardian.com/business/2026/jun/11/lidl-gb-third-party-data-breach)[2026 Asahi Group Production systems disrupted ](https://www.reuters.com/technology/cybersecurity/asahi-says-cyberattack-disrupted-operations-japan-2025-09-29/)[2026 Kido International 8K records ](https://www.bbc.co.uk/news/articles/c623d7v0e5xo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o)[2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Lidl GB Customer contact data ](https://www.theguardian.com/business/2026/jun/11/lidl-gb-third-party-data-breach)[2026 Asahi Group Production systems disrupted ](https://www.reuters.com/technology/cybersecurity/asahi-says-cyberattack-disrupted-operations-japan-2025-09-29/)[2026 Kido International 8K records ](https://www.bbc.co.uk/news/articles/c623d7v0e5xo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o) [View All →](/learn/breaches) [![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/) Products Solutions [Why OSS](/why-oss) More [Help](/help)[Get started](/get-started) Overview Defence: What the Lock the Digit…The Statistics That Demand Atten…Defence Assumes Connection. Resi…Resilience Through Physical Disc…Crown Jewels StrategyDefence and Resilience: Compleme…Sources and Further ReadingKey TakeawaysMore [Knowledge Vault](/learn/knowledge)/ Insight Insight · 24 March 2026 # Lock the Digital Door, Turn the Power Off: Defence and Resilience Explained The Government urges businesses to lock the digital door on cyber criminals through Cyber Essentials. But defence is not resilience. For the data that matters most, physical disconnection ensures it survives when defences fail. ![Mark Fermor](/assets/mark-fermor-aWtKNSv7.jpg) Mark Fermor Director & Co-Founder, Firevault 7 min read Share [](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Ffire-vault.com%2Flearn%2Fknowledge%2Flock-the-door-cyber-essentials-offline-storage)[](https://twitter.com/intent/tweet?url=https%3A%2F%2Ffire-vault.com%2Flearn%2Fknowledge%2Flock-the-door-cyber-essentials-offline-storage&text=Lock%20the%20Digital%20Door%2C%20Turn%20the%20Power%20Off%3A%20Defence%20and%20Resilience%20Explained%0A%0AThe%20Government%20urges%20businesses%20to%20lock%20the%20digital%20door%20on%20cyber%20criminals%20through%20Cyber%20Essentials.%20But%20defence%20is%20not%20resilience.%20For%20the%20data%20that%20matters%20most%2C%20physical%20disconnection%20ensures%20it%20survives%20when%20defences%20fail.)[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Ffire-vault.com%2Flearn%2Fknowledge%2Flock-the-door-cyber-essentials-offline-storage)[](mailto:?subject=Lock%20the%20Digital%20Door%2C%20Turn%20the%20Power%20Off%3A%20Defence%20and%20Resilience%20Explained&body=The%20Government%20urges%20businesses%20to%20lock%20the%20digital%20door%20on%20cyber%20criminals%20through%20Cyber%20Essentials.%20But%20defence%20is%20not%20resilience.%20For%20the%20data%20that%20matters%20most%2C%20physical%20disconnection%20ensures%20it%20survives%20when%20defences%20fail.%0A%0Ahttps%3A%2F%2Ffire-vault.com%2Flearn%2Fknowledge%2Flock-the-door-cyber-essentials-offline-storage) ![Lock the Digital Door, Turn the Power Off: Defence and Resilience Explained](/assets/lock-the-digital-door-campaign-BOdDEpwX.jpg) Insight Why it matters ## What this means for organisations holding critical data The Government urges businesses to lock the digital door on cyber criminals through Cyber Essentials. But defence is not resilience. For the data that matters most, physical disconnection ensures it survives when defences fail. **On this page**[Defence: What the Lock the Digit…](#section-0)[The Statistics That Demand Atten…](#section-1)[Defence Assumes Connection. Resi…](#section-2)[Resilience Through Physical Disc…](#section-3)[Crown Jewels Strategy](#section-4)[Defence and Resilience: Compleme…](#section-5)[Sources and Further Reading](#section-6)[Key Takeaways](#section-7) On this page 1. [Defence: What the Lock the Digital Door Campaign Covers](#section-0) 2. [The Statistics That Demand Attention](#section-1) 3. [Defence Assumes Connection. Resilience Does Not.](#section-2) 4. [Resilience Through Physical Disconnection](#section-3) 5. [Crown Jewels Strategy](#section-4) 6. [Defence and Resilience: Complementary Disciplines](#section-5) 7. [Sources and Further Reading](#section-6) 8. [Key Takeaways](#section-7) In February 2026, the Government launched the [Lock the Door](https://www.gov.uk/government/news/businesses-urged-to-lock-the-door-on-cyber-criminals-as-new-government-campaign-launches) campaign, urging businesses to adopt the [Cyber Essentials](https://www.ncsc.gov.uk/cyberessentials/overview) scheme to protect against common cyber threats. The campaign, developed by the [National Cyber Security Centre (NCSC)](https://www.ncsc.gov.uk/) and the Department for Science, Innovation and Technology (DSIT), is timely, practical, and important. It addresses one half of a complete data protection strategy: defence. The other half is resilience. At Firevault, we design and operate [physically disconnected storage](/storage) infrastructure. We work with organisations that have already invested in strong cyber defences and recognise that their most sensitive data requires a fundamentally different protection model: one that removes the network connection entirely. This article explains why both defence and resilience matter, and how they complement each other. ## Defence: What the Lock the Digital Door Campaign Covers The Lock the Digital Door campaign promotes [Cyber Essentials](https://www.ncsc.gov.uk/cyberessentials/overview), a government-backed certification scheme built around five key controls: - **Firewalls**: Protecting the network perimeter from unauthorised access - **Secure configuration**: Removing unnecessary services and default settings that create vulnerabilities - **Software updates**: Ensuring known vulnerabilities are patched promptly - **User access control**: Restricting who can access systems and data, and at what privilege level - **Malware protection**: Defending endpoints against malicious software These five controls represent the baseline. They are the minimum that every organisation should have in place. The Government is right to promote them aggressively. ## The Statistics That Demand Attention The campaign is backed by figures from the [Cyber Security Breaches Survey 2025](https://www.gov.uk/government/statistics/cyber-security-breaches-survey-2025) and the [Cyber Security Longitudinal Survey](https://www.gov.uk/government/statistics/cyber-security-longitudinal-survey-wave-four-results) that make the case for action unavoidable: - **£14.7 billion**: the annual cost of cyber threats to businesses, _[DSIT, 2026](https://www.gov.uk/government/news/businesses-urged-to-lock-the-door-on-cyber-criminals-as-new-government-campaign-launches)_ - **50 per cent**: of small firms experienced a cyber breach or attack in the last 12 months, _[Cyber Security Breaches Survey 2025](https://www.gov.uk/government/statistics/cyber-security-breaches-survey-2025)_ - **82 per cent**: of medium and large businesses suffered a cyber incident in the past year - **92 per cent**: fewer insurance claims were made by organisations with [Cyber Essentials](/solutions/oss/compliance/cyber-essentials) in place, _[NCSC](https://www.ncsc.gov.uk/cyberessentials/overview)_ - **£195,000**: the average cost of a significant cyber incident Cyber Security Minister Baroness Lloyd stated: "No business is out of reach from cyber criminals. SMEs play a vital role in our economy, and business owners work incredibly hard to build something valuable, but too many still assume cyber criminals only go after big brands.", _[GOV.UK Press Release, February 2026](https://www.gov.uk/government/news/businesses-urged-to-lock-the-door-on-cyber-criminals-as-new-government-campaign-launches)_ The data is clear. The threat is not theoretical. It is operational, financial, and existential for many smaller firms. ## Defence Assumes Connection. Resilience Does Not. Every one of the five Cyber Essentials controls operates on a shared assumption: that the systems being protected remain connected to a network. Firewalls protect a network perimeter. Software updates require an online update path. Access controls manage credentials on connected systems. Malware protection monitors connected endpoints. This is not a flaw in the scheme. It is a scope decision. Cyber Essentials is designed to defend connected infrastructure from the most common attacks. It does this well, and the 92 per cent reduction in insurance claims is evidence of its effectiveness. But defence and resilience are different disciplines. Defence keeps attackers out. Resilience keeps your business running when attackers get in. Ransomware does not need to bypass a firewall if it enters through a phishing email to an authorised user. Credential theft does not need to overcome access controls if the credentials unlock a system that is always online. Supply chain attacks do not need to penetrate a well-configured system if they can compromise a trusted vendor with network access. The [NCSC Annual Review 2024](https://www.ncsc.gov.uk/annual-review/2024) reported a threefold increase in the most severe cyber incidents compared to the previous year. The common thread is that connected systems are, by definition, reachable. And reachable systems can be reached by attackers. Defence reduces the likelihood. Resilience addresses the consequence. > Cyber Essentials is the right answer to the right question: how do we defend connected systems? But for the data that an organisation cannot afford to lose, there is a more fundamental question: does this data need to be connected at all? That is not a defence question. It is a resilience question., _Mark Fermor, Co-Founder, [Firevault](https://fire-vault.com)_ ## Resilience Through Physical Disconnection Consider the scenario. A small professional services firm achieves Cyber Essentials certification. Firewalls are configured correctly. Software is patched. Access controls are in place. Anti-malware is running on every endpoint. Their defence is strong. Then a [ransomware attack](/threats/ransomware) enters through a compromised supplier update. The malware moves laterally across the network. Every connected system is encrypted. The firm's client records, financial data, and [intellectual property](/oss-for-intellectual-property) are locked. The ransom demand arrives. The five Cyber Essentials controls did their job. They defended against the most common attacks. But this attack got through. Defence reduced the likelihood. Now the question is resilience: can the firm recover? Now consider the same firm with one additional measure. Their most critical data, the client records, the contracts, the irreplaceable documents, is stored on a [Firevault system](/vault). Physically disconnected from the network. No IP address. No network path. No connection to the compromised infrastructure. The ransomware encrypted everything it could reach. It could not reach the vault. The firm loses operational continuity, which is painful. But it does not lose the data that defines its business and its obligations to clients. Defence kept most threats out. Resilience kept the crown jewels safe. ## Crown Jewels Strategy The Government's campaign is right to focus on baseline defence for all businesses. Cyber Essentials should be universal. But within every organisation, there exists a category of data where defence alone is not sufficient. Board materials. Client privilege files. Financial records. Succession plans. Intellectual property. Personal documents of directors and high-net-worth individuals. Regulatory evidence. Contracts that, if exposed, could result in litigation, reputational damage, or competitive disadvantage. This is the crown jewels category. It is the data where the consequences of compromise are not measured in downtime or recovery costs, but in existential outcomes. Business closure. Personal liability. Loss of professional standing. For this category, the correct strategy is not stronger defence alone. It is adding [resilience through physical disconnection](/offline-secure-storage/what-is-oss). Turning the power off ensures that no matter what happens to the connected infrastructure, the most critical data remains beyond the reach of any network-based threat. ## Defence and Resilience: Complementary Disciplines Firevault does not compete with Cyber Essentials. The two address different dimensions of the same challenge. Cyber Essentials is defence: it protects operations. [Offline Secure Storage](/offline-secure-storage/what-is-oss) is resilience: it protects crown jewels. The Lock the Digital Door campaign is an important step. Every business should lock its digital doors. But for the data that matters most, locking the door is not enough. Turning the power off ensures that even when attackers get through the door, your most critical data is already beyond their reach. ## Sources and Further Reading - [Lock the Door Campaign, GOV.UK Press Release (February 2026)](https://www.gov.uk/government/news/businesses-urged-to-lock-the-door-on-cyber-criminals-as-new-government-campaign-launches) - [Cyber Essentials, NCSC Overview](https://www.ncsc.gov.uk/cyberessentials/overview) - [Cyber Security Breaches Survey 2025, DSIT](https://www.gov.uk/government/statistics/cyber-security-breaches-survey-2025) - [Cyber Security Longitudinal Survey Wave Four, DSIT](https://www.gov.uk/government/statistics/cyber-security-longitudinal-survey-wave-four-results) - [NCSC Annual Review 2024](https://www.ncsc.gov.uk/annual-review/2024) - [How Offline Secure Storage Works, Firevault](/offline-secure-storage/what-is-oss) - [Explore the Vault, Firevault](/vault) ## Key Takeaways - **The Lock the Digital Door campaign is necessary and well-designed**, promoting baseline cyber defence that every business should adopt - **Cyber Essentials is defence**: five proven controls that protect connected systems from common attacks - **Defence and resilience are different disciplines**: defence keeps attackers out; resilience keeps you running when they get in - **Physical disconnection is resilience**: removing critical data from the network entirely ensures it survives any breach - **Every organisation needs both**: Cyber Essentials for operations, offline storage for crown jewels - **Learn more** about [how offline secure storage works](/offline-secure-storage/what-is-oss) or [explore the Vault](/vault) About the author ![Mark Fermor](/assets/mark-fermor-aWtKNSv7.jpg) ### Mark Fermor [](https://www.linkedin.com/in/mfermor) Director & Co-Founder Co-founder of Firevault, focused on offline secure storage and protecting individuals and businesses from fraud, fines, loss and damage. Speaker, owner and advisor. The Firevault view**Offline Secure Storage® keeps a clean copy beyond the reach of an attacker.**[Why #OSS →](/why-oss) Control systems and access**Cut the physical paths attackers and third parties depend on.**[Explore Control →](/solutions/control) Get started**Get started, or talk to a member of the team.**[Get started →](/get-started) How Firevault would handle this ## Controls an auditor can physically verify Firevault gives you physical separation, named custody and evidenced access, so compliance claims about isolation and control are things you can show, not just assert. [Get started](/get-started)[Talk to the team](/demo) **Custody**Named, access-controlled hardware in a Firevault Bunker **Evidence**Access windows and retrieval events are recorded **Separation**Physical isolation that satisfies offline copy requirements **Jurisdiction**Stored where your regulatory position requires Keep reading ## You may also find these useful [Knowledge ### End-of-Life Technology: CNI Cyber Risk Nearly half of all network assets are ageing or obsolete. When technology can no longer be patched, it becomes a permanent open door for attackers. Physical disconnection addresses what patching cannot. ](/learn/knowledge/end-of-life-technology-cni-hidden-cyber-risk)[Knowledge ### NCSC CNI Guide: Severe Cyber Threats An authoritative guide aligned with NCSC recommendations for Critical National Infrastructure. How physical disconnection supports the four-objective framework for cyber resilience. ](/learn/knowledge/ncsc-cni-severe-cyber-threat-guide)[Knowledge ### UK CNI Threat Landscape 2026 State actors, ransomware groups, and supply chain vulnerabilities converge on UK critical infrastructure. Understanding the threat informs the defence. ](/learn/knowledge/uk-cni-threat-landscape-2026) ![Mark Fermor](/assets/mark-fermor-aWtKNSv7.jpg) ![David Bailey](/assets/david-bailey-Dgqj8eaE.jpg) ![Kenny Phipps](/assets/kenny-phipps-CVyooRsR.jpg) Online Now Concierge ## Which offline secure storage solution is right for you? Answer a few quick questions and we will recommend the right solution, whether that is a personal vault or a scalable offline storage system built for your needs. Takes about 2 minutes. No account needed. Find Out Free 2 mins No sign-up