Windows 10 End of Life – What It Means for Your Cyber Essentials
Windows 10 support ends on 14 October 2025. After that date, Microsoft will stop releasing security updates for the operating system. For organisations maintaining or working towards Cyber Essentials certification, this is a major red flag.
Why Windows 10 matters for Cyber Essentials
Cyber Essentials requires that all software in use is:
-
Supported by the vendor, and
-
Receiving security updates.
From 14 October 2025, Windows 10 will no longer meet those criteria. Any Cyber Essentials self-assessment submitted with Windows 10 devices present will automatically fail.
The wider cyber risk
Unsupported systems quickly become magnets for attackers. We’ve seen this before:
-
In 2017, the WannaCry ransomware outbreak crippled NHS systems running outdated Windows, causing cancelled operations and widespread disruption.
-
With millions of UK devices still running Windows 10, there’s potential for a repeat — but on a much larger scale.
What to do next
-
Audit your devices – find every machine still on Windows 10.
-
Plan the transition – upgrade to Windows 11 or a supported alternative.
-
Work with your MSP – don’t assume they’ve scheduled this; ask the question.
-
Mitigate legacy needs – if business-critical apps require Windows 10, consider containment strategies like network isolation.
Final word
Windows 10 retirement isn’t just a compliance milestone — it’s one of the biggest cyber security events of the next 12 months. Act now, and don’t leave your organisation exposed.