West Midlands Cyber in Action

Cyber capability is being built across the West Midlands through businesses, universities, events, skills programmes and collaboration. We look at how activity across the region is connecting cyber with innovation, manufacturing, leadership and workforce development.

Contents

West Midlands Cyber in Action: Community, Skills and Innovation

A regional cyber ecosystem is easiest to understand when it is working. Strategies, organisational charts and programme descriptions can explain how institutions are intended to collaborate, but the practical value of a network becomes much clearer when businesses, researchers, students, practitioners and public organisations are brought together around real activity.

A particularly concentrated example came on 24 May 2026, when a series of West Midlands cyber engagements brought several strands of the regional ecosystem into view at the same time. The originating account, Super-Productive WM Cyber Day: From Cyber Innovation to AI Security, Skills and Community, recorded a day spanning community development, innovation, skills, artificial intelligence and the continuing work of building stronger connections across the region.

For the West Midlands Cyber Hub, the value of revisiting that activity is not to reproduce a diary of meetings. It is to examine what happens when the different components of a regional cyber community begin to interact. The businesses that need cyber capability, the companies developing it, the universities producing research and skills, and the organisations supporting economic development are closely related, but those relationships have to be created and maintained.

The day provided a useful snapshot of that process in action.

Read the wider regional analysis. The West Midlands Cyber Cluster examines why community networks matter to the development of regional cyber capability and how stronger connections can support the West Midlands cyber economy, in the companion article “West Midlands Cyber in Action: Community, Skills and Industrial Resilience”.

Key Takeaways

• Regional cyber capability depends on connections between businesses, universities, practitioners, skills providers and public organisations rather than on any single institution.
• Artificial intelligence is creating new security requirements while simultaneously becoming part of the cyber-security market itself, creating opportunities for regional companies and researchers.
• Skills activity is most valuable when it connects education and training with employers, practical experience and visible career pathways.
• Community events can provide important infrastructure for collaboration, but their value should ultimately be judged by the relationships and activity that continue afterwards.
• The West Midlands Cyber Hub can strengthen the ecosystem by making these connections easier to form and by providing routes from initial engagement towards practical support, collaboration and commercial opportunity.

A Cyber Ecosystem Has to Connect Different Types of Capability

Cyber security is sometimes discussed as though it were a self-contained industry. There is certainly a recognisable cyber sector consisting of product companies, consultancies, managed security providers and specialist services, but the economic role of cyber extends much further.

Manufacturers need to protect increasingly connected production environments. Professional-services businesses depend on digital systems and sensitive information. Universities develop cyber research and talent. Public organisations need resilient services, while technology companies increasingly have to consider security as part of product design.

Artificial intelligence adds another layer because organisations adopting AI create new security and governance questions at the same time as cyber companies develop products designed to protect AI systems.

A regional cyber ecosystem therefore has to connect several communities that do not necessarily describe themselves in the same way.

The manufacturer concerned about remote access to machinery may not attend a conventional cyber-security conference. A researcher working on AI assurance may not naturally encounter the SME developing a commercial product around a related problem. A student can complete a cyber degree without becoming familiar with smaller employers operating in the region.

The purpose of regional infrastructure is partly to reduce those gaps.

The activity visible during the May 2026 engagements demonstrated why this matters. Community, innovation, skills and emerging technology were not separate agendas. They were different parts of the same regional capability problem.

Innovation Becomes More Useful When It Meets Real Problems

Cyber innovation is valuable when it addresses a problem that organisations actually experience.

That sounds obvious, but technology programmes can become detached from demand. Products may be technically impressive without fitting procurement requirements, operational environments or the budgets of intended customers.

Regional networks can improve that relationship by creating opportunities for innovators and users to encounter one another earlier.

For West Midlands cyber companies, the surrounding economy provides a particularly valuable testing ground. The region contains manufacturing and engineering businesses, professional-services firms, public organisations, universities and a broad SME base. Each creates different security requirements.

A company developing industrial cyber technology can learn from manufacturers dealing with legacy equipment and remote maintenance. An AI-security business can engage with organisations introducing generative AI into real workflows. A provider serving SMEs can understand why conventional enterprise security propositions often translate poorly into smaller organisations.

These interactions are useful even when they do not immediately result in a sale.

They help companies determine whether they are solving the right problem, whether customers understand the proposition and what evidence will be required before adoption.

The Hub can support this process by making it easier for cyber innovators to meet organisations outside the cyber sector rather than creating a community in which suppliers primarily talk to one another.

AI Security Is Becoming a Significant Cyber Market

Artificial intelligence was one of the areas highlighted in the May activity, reflecting its growing importance to both technology adoption and cyber security.

The commercial evidence supports that direction.

The UK Government’s 2026 Cyber Security Sectoral Analysis identified 111 firms offering AI-security capabilities, compared with 66 in the previous analysis. That represents an increase of 68% in the identified provider base.

Thirty-two of those organisations were classified as specialist AI-security companies.

The capabilities being developed cover several areas. The analysis found activity around model security, advisory services, runtime and infrastructure protection, and AI red teaming. This suggests that AI security is developing into a market with several distinct technical and professional requirements rather than a single product category.

For West Midlands businesses, there are two sides to this development.

Organisations adopting AI need to consider how systems are governed, what information is supplied to them, how access is controlled and whether new dependencies are being introduced. At the same time, companies and researchers capable of solving those problems have an emerging commercial opportunity.

The regional challenge is to connect those two groups.

AI-security capability should not develop independently of the businesses adopting AI. Equally, organisations introducing AI should not have to navigate an entirely separate ecosystem when they need security expertise.

Connecting adoption with security can help create demand for regional capability while improving the quality of AI implementation.

Cyber Skills Need Employer Connections

Skills are another area where regional coordination can create practical value.

The West Midlands has universities, colleges, training programmes and experienced practitioners capable of developing cyber talent. Increasing the supply of training, however, does not automatically solve the skills problem.

Employers need people with particular combinations of knowledge and experience.

Some roles require deep technical expertise. Others involve risk, governance, audit or compliance. Cyber businesses also need software engineers, sales specialists, product managers and people who understand particular industries.

Industrial cyber creates another requirement: professionals who can understand both security and operational environments.

The challenge is therefore one of alignment as much as volume.

Employers need routes through which they can communicate changing requirements. Students need visibility of the roles that actually exist. Education providers benefit from relationships with practitioners who can bring current industry problems into learning.

Community activity can help build those connections.

A student who meets a regional cyber company gains a more concrete view of possible employment. An SME that has never recruited a graduate can encounter potential candidates and university contacts. Practitioners can contribute experience that complements formal education.

The Hub’s role is not to become a training provider for every cyber discipline. It can instead help connect the organisations already delivering skills with the employers and learners who need them.

Smaller Employers Need Visibility Too

Discussions about cyber careers frequently concentrate on major employers.

Large organisations have established graduate programmes, recruitment teams and recognisable brands. Smaller cyber businesses may offer excellent opportunities but struggle to achieve the same visibility.

This matters for regional growth.

If students and early-career professionals are unaware of smaller companies operating nearby, those businesses face a recruitment disadvantage. Graduates may assume that meaningful cyber careers require moving elsewhere even when relevant opportunities exist within the West Midlands.

Community networks can help correct that information problem.

Events, employer engagement, mentoring and practical projects can expose people to a wider range of organisations before they begin formal job searches.

This also helps students understand the diversity of cyber careers.

Working for a specialist consultancy, product startup, managed service provider, manufacturer or public organisation can produce very different professional experiences. Greater visibility allows people to make more informed choices while expanding the recruitment pool available to regional employers.

A stronger talent pipeline therefore requires more than producing qualified candidates. It requires a market in which candidates and employers can find one another.

Community Events Matter When Something Happens Afterwards

Events are among the most visible outputs of a regional Hub, but attendance figures alone provide a limited measure of impact.

A successful event may create value in several ways.

An SME can discover a support programme. A founder can meet a prospective customer. Researchers can identify a company with a problem relevant to their work. Students can meet employers, while practitioners from different sectors can recognise that they are dealing with related challenges.

The important question is whether those connections persist.

If every event ends when participants leave the room, the ecosystem remains dependent on repeatedly creating new interactions. If participants continue conversations, make referrals, establish collaborations or return with colleagues, the network begins to accumulate value.

This is one reason a sustained regional community matters.

People do not have to establish trust from zero every time a new programme begins. They become familiar with organisations across the ecosystem and develop a clearer understanding of where expertise sits.

The May 2026 activity was useful partly because it showed several of these networks intersecting.

Cyber community development, skills, innovation and AI security could be discussed as separate subjects, but their practical value increases when the people working on them can see the relationships between them.

Universities Are Part of the Regional Innovation System

West Midlands universities contribute to cyber capability through teaching, research, specialist expertise and engagement with industry.

The opportunity is to integrate those assets more closely with the wider regional economy.

A company may have a difficult technical problem without having the resources to conduct substantial research internally. A university team may be investigating a relevant area without knowing which regional organisations could provide realistic use cases or environments for evaluation.

Connecting the two can create value on both sides.

Businesses gain access to expertise and research capability. Researchers gain exposure to operational problems and potential routes for applying their work. Students can gain practical experience through projects and placements.

Some collaborations may ultimately produce intellectual property, spinouts or commercial products. Others may improve an existing company’s processes or contribute evidence to a wider research programme.

All are legitimate forms of innovation.

A regional ecosystem should therefore avoid defining university engagement solely in terms of startup creation. The broader objective is knowledge exchange: ensuring that research capability can move towards practical application where appropriate and that real-world problems can inform future research.

Industrial Cyber Creates a Distinct West Midlands Opportunity

The West Midlands economy gives regional cyber activity an important industrial dimension.

Manufacturing environments increasingly combine traditional operational technology with connected digital systems, remote access, cloud services and complex supply chains. These developments can improve productivity and visibility, but they also create dependencies that conventional office-focused security does not fully address.

This matters for regional cyber innovation.

Industrial organisations can provide real-world problems around asset visibility, remote maintenance, legacy systems, production resilience and supplier access. Cyber companies can develop expertise and services around those requirements, while universities can contribute research in areas such as connected systems and secure engineering.

The result can be mutually reinforcing.

Manufacturers gain access to more relevant cyber capability. Providers gain specialist experience and reference customers. Researchers encounter problems with genuine industrial application, while the region develops a cyber proposition connected to its underlying economy.

This is more credible than attempting to replicate the cyber profile of another region.

The West Midlands advantage lies partly in the sectors already present here.

Regional cyber development should build around those strengths.

The Hub Can Make Cross-Sector Connections Easier

The West Midlands Cyber Hub sits at an important point between the cyber community and the organisations that need its capability.

That position should allow it to bring together groups that might not otherwise encounter one another routinely.

A manufacturing business may arrive looking for practical guidance and discover relevant research or specialist expertise. A cyber startup may engage through an innovation programme and meet a potential customer. A student attending a community event may encounter an employer, while an organisation exploring AI may find practitioners capable of helping it consider security alongside adoption.

The Hub does not need to own the resulting relationship.

Its value comes from making the connection possible.

This is an important distinction in ecosystem development. Success should not be measured solely by programmes delivered directly by the Hub. A referral to another organisation can be a successful outcome if that organisation is better placed to provide the required support.

The objective is a functioning regional network rather than institutional expansion.

Different Parts of the Ecosystem Need Different Entry Points

A regional cyber community becomes more accessible when people can engage through the issue that matters to them rather than through a predetermined institutional structure.

For an SME, the entry point may be a customer asking about Cyber Essentials.

For a manufacturer, it may be concern about remote access to industrial equipment. A founder may be looking for investment or a first customer. A researcher may want an industry partner, while a student may simply want to understand what a cyber career looks like.

All can ultimately connect with the same regional ecosystem.

This problem-led approach is important because many potential users will not initially think of themselves as members of a cyber community.

They have business, technology, skills or operational problems.

Regional infrastructure becomes useful when it can translate those problems into routes towards appropriate capability.

That makes the Hub a front door rather than a closed professional network.

A Strong Community Should Produce Economic and Resilience Outcomes

Community-building has value in its own right, but the case for sustained regional cyber infrastructure becomes stronger when community activity contributes to wider outcomes.

For businesses, that can mean better access to cyber support and improved resilience.

For cyber companies, it can mean customers, partnerships and investment. For universities, it can create research collaboration and knowledge exchange. For individuals, it can produce training, professional relationships and employment opportunities.

These outcomes reinforce one another.

Growing cyber businesses create jobs and demand for skills. Better employer connections strengthen education pathways. Research collaboration can generate new commercial capability. Organisations that become more cyber-resilient are better able to participate confidently in increasingly demanding supply chains.

The ecosystem should therefore be understood as a system rather than a collection of separate programmes.

Skills activity supports business growth. Business demand creates innovation opportunities. Research supports both. Community infrastructure makes the relationships between them easier to form.

The Measure of Progress Is What the Network Enables

The activity visible across the West Midlands in May 2026 offered a useful picture of a cyber ecosystem becoming more connected.

Its significance was not the number of meetings that could be fitted into one day.

It was the range of relationships represented by them.

Cyber innovation was being connected with real economic requirements. AI security was emerging as both a new risk and a new market. Skills conversations were increasingly linked with employers and career pathways, while community activity provided the connective environment in which those discussions could reinforce one another.

That is the practical role of regional cyber infrastructure.

The West Midlands does not need every cyber activity to be delivered by one organisation or located in one building. It needs businesses, universities, practitioners, public organisations and people entering the profession to be able to find one another and work together with less friction.

The West Midlands Cyber Hub provides one mechanism for making that possible.

A successful regional community should ultimately become visible through what it enables: businesses receiving appropriate support, companies finding customers and collaborators, researchers applying expertise, people developing careers and new cyber capability emerging in response to the region’s economic needs.

The May 2026 activity provided a snapshot of that process. The continuing task is to turn those individual connections into relationships that strengthen the West Midlands cyber ecosystem over time.