Key Points

• WSTC Cyber Security Webinar – link to recording
• PAS 96 – revised and published
• Middle East Conflict – supply chain concerns & food crime
• Distribution fraud – tips to protect your business
• Security – New business guidance

WSTA Cyber Security Webinar

Earlier this month the WSTA joined with the National Cyber Security Centre (NCSC) to present a bespoke webinar for WSTA members with an overview of the cyber security landscape facing UK organisations, with a particular focus on the food and drink sector.

If you were not able to join us, a recording of the session is now available using the link below.

We heard from the NCSC on the organisation’s role in supporting businesses through cyber threat intelligence, incident response and practical guidance.

The session explored the evolving cyber threat environment, including ransomware, phishing and supply chain risks, and discussed why businesses of all sizes remain potential targets. It also examined the growing influence of AI on cyber threats before outlining the key steps organisations can take to improve their resilience.

Throughout, the presentation emphasises the importance of preparation, good cyber governance and making use of the NCSC’s free tools, services and best practice guidance to reduce the likelihood and impact of cyber incidents.

A recording of the webinar is now available on the WSTA website.

This recording is for members only, please do not share outside of your organisation and please treat the information contained within it in confidence.

You will need to be logged in to the WSTA website to access the recording and the slides.

Password: ncscwstacyber

Next Steps: To support members we will shortly be publishing some guidance to help signpost them to the services offered by the NSCS and highlight best practice in this area. We will also be seeking feedback on what more we can do to support members such as sectoral desk top training exercises.

If you have further questions or suggestions for future work in this area please let me know.

PAS 96 – Food Defence – Protection and Prevention from Deliberate Acts

Recently updated and revised, PAS 96: 2026 is a guidance document developed by the British Standards Institution to help businesses improve the resilience of their supply chains to fraud or other forms of attack such as sabotage or food terrorism.

Intended as a practical tool, companies can apply this guide by implementing the TACCP (Threat Assessment Critical Control Point) methodology, conducting vulnerability assessments, and building supply network resilience.

For more information and to download a free copy of the guidance, please click here.

­Middle East Conflict – Supply Chain Concerns & Food Crime

Across government departments, including the Food Standards Agency and Defra, have undertaken a commodity risk management exercise to identify food and feed commodities impacts arising from the Middle East Conflict.

They report that whilst the UK does not face any immediate risk of food shortages, the system is vulnerable to indirect effects from extended supply chains and logistics challenges. with the over arching context of financial pressures both nationally and globally.

It is considered likely that the Middle East conflict presents increased opportunities for food crime and a greater likelihood of both food standards and food safety incidents as market disruption, and fluctuating demand can create incentives for adulteration, substitution, misrepresentation, fraud and other illicit activity.

The National Food Crime Unit are reminding businesses to continue to take steps to ensure that appropriate due diligence checks are completed.

• Be conscious of product being supplied at lower prices than would be expected, check supplier traceability documentation and ensure you are using reputable suppliers.
• Ensure supplier approval procedures are followed.
• Document fraud in laboratory results – following a NFCU alert in 2025 businesses are reminded to ensure they complete due diligence checks and carefully review paperwork for new suppliers and supply chains.
• Ensure that following any changes to suppliers or ingredients, product specifications are still compliant and there have been no changes which would affect label or origin claims (e.g. vegan).

It was noted that future risks might include availability and cost of fertilisers, or materials used in packaging derived from petroleum.

Distribution Fraud – tips to protect your business

Distribution fraud is a well know type of fraud where criminals impersonate legitimate, well-known companies to trick suppliers into shipping goods on credit, only to intercept the products and disappear without paying, leaving the supplier to face a financial loss.

Following a successful investigation and prosecution of a case of distribution fraud within the food chain led by the National Food Crime Unit, they have provided businesses with some useful tips to avoid falling victim to this type of fraud.

• Train employees on how to identify fraudulent email addresses and domains.
• Implement user training and phishing exercises to raise awareness about the risks of clicking suspicious links and attachments in emails.
• Conduct web searches for your company name to identify fraudulent websites that may be used to impersonate you in a scam.
• Be aware of having lists of suppliers and customer details on websites – this gives fraudsters a potential list of victims.
  Follow all existing procedures for new customers setting up accounts – If someone is trying to force a quick purchase, stop and think why. Your policies and procedures exist for important reasons.
• If you have suspicions about a new customer, ring or email the company back on contact details gained directly either from their website or from a trusted industry contact.

The NFCU also note that cyber crime is now a key component in many cases of distribution fraud.

Business Security – new guidance from Protect UK

Earlier this year the Joint Terrorism Analysis Centre (JTAC) raised the UK National Threat Level from SUBSTANTIAL, meaning an attack is likely, to SEVERE, meaning an attack is highly likely.

The most likely threat methodology has been identified as a marauding terrorist attacker, followed by vehicle as a weapon, an IED (Improvised explosive device), fire as a weapon, chemical radiation and cyber attack. Businesses are advised to think about these methods when developing their business risk assessments and risk management processes.

Protect UK is the official UK hub for counter-terrorism and protective security advice. It was launched to help businesses reduce their vulnerability to security threats.

Protect UK has developed ‘Guide Shelter Report‘ – a set of principles which can be used by businesses, organisations and their staff to respond effectively in the event of a terrorist attack. This builds on earlier guidance ‘Run, Hide, Tell’ which was criticised for not helping businesses meet their duty of care to their customers.

Members can implement these new principles, where appropriate, to meet their duty of care responsibilities for customers and staff and to update incident response plans.