You are here

England and Wales

Survey Answer:

National Cyber Security Centre (NCSC)
The NCSC, officially opened in February 2017, brought together the capabilities developed by the Centre for the Protection of National Infrastructure, and Communications-Electronics Security Group (the information security arm of GCHQ), CERT-UK and the Centre for Cyber Assessment.
The NCSC has responsibility for:
(a) the protection of the critical UK national security IT networks, data and systems from cyber-attack; and
(b) supporting the most critical organisations in the UK, the wider public sector, industry and SMEs by providing advice relating to protective security.
The NCSC’s remit is to:
(a) understand cyber security, and distil this knowledge into practical guidance made to all;
(b) respond to cyber security incidents to reduce the harm they cause to organisations and the wider UK;
(c) use industry and academic expertise to nurture the UK's cyber security capability; and
(d) reduce risks to the UK by securing public and private sector networks.
The NCSC endorses the use of risk methods and frameworks, available to organisations to manage their IT risk, such as ISO 27005 and Information Security Forum (ISF) IRAM 2.
The NCSC provides certification for organisations to guard against the most common cyber threats and demonstrate their commitment to cyber security:
(a) Cyber Essentials is a non-sector specific self-accreditation for organisations of all sizes. The UK Government widely encourages its adoption and made it mandatory for Central Civil Government contracts advertised after 1 October 2014 which feature characteristics involving handling of personal information and provision of certain ICT products and services.
(b) Cyber Essentials Plus Certificate requires cyber security to be verified by independent experts. The certification process has general application. Recent certificate holders include Barclays Bank, Deutsche Bank AG, Lloyds Banking Group and The Co-operative Bank plc.
Cyber Aware
Cyber Aware is a cross-government awareness and behaviour change campaign delivered by the Home Office in conjunction with the Department of Culture, Media & Sport alongside the National Cyber Security Centre, and funded by the National Cyber Security Programme in the Cabinet Office.
Cyber Aware aims to drive behaviour change amongst small businesses and individuals, so that they adopt simple secure online behaviours to help protect themselves from cyber criminals.
More information can be found here.

Provided By:
David Varney: Burgess Salmon LLP