The aim of the Cyber Security and Resilience Bill is to target critical infrastructure operators and essential service providers. Midmarket businesses need to be aware that they may be part of a critical supply chain and open to scrutiny as a result.