The National Cyber Security Centre (NCSC) is a UK government organization established in October 2016, headquartered in Victoria, London. It provides advice, guidance, and support to both public and private sectors to protect against cyber threats and improve the UK's cyber security. The NCSC is part of the Government Communications Headquarters (GCHQ) and serves as the UK's national technical authority on cyber threats and information assurance.
The NCSC offers cyber security guidance, incident management, and certification for cyber security degrees and apprenticeships. It aims to make the UK one of the safest places to live and work online by supporting organizations in strengthening their cyber defenses.
NCSC Cyber Incident Response Scheme
The NCSC's Cyber Incident Response (CIR) scheme works by assuring and accrediting specialist service providers who help organisations respond effectively to cyber attacks. It has two levels:
CIR Standard Level:
Providers at this level support victims of common cyber attacks (e.g., ransomware), helping to determine the incident's severity, manage immediate impacts, fix compromised systems, recommend further security improvements, and deliver a post-incident report. This level is suitable for most UK organisations outside critical national infrastructure or highly targeted sectors.
CIR Advanced Level:
This level is for handling significant, bespoke, or nation-state-backed attacks, offering full investigations and tailored recommendations. It mainly serves government, critical infrastructure, and regulated sectors.
The scheme is managed by delivery partners like IASME and CREST, who assess and onboard providers to ensure they meet NCSC’s rigorous standards. Organisations experiencing a cyber incident can then engage these assured providers for trusted, high-quality response services.
ODFC Cybersecurity (UK)
