Incident response

1 Go to resource

Incident Management

The NCSC defines a cyber security incident as:

A breach of a system’s security policy in order to affect its integrity or availability
The unauthorised access or attempted access to a system

Cyber incidents can take many forms, such as denial of service, malware, ransomware or phishing attacks.

Related resources

TTX Gym

Running a cyber security exercise is an immersive, effective way to evaluate and practise response skills. Yet, designing and facilitating exercises is complex. TTX Gym provides a custom-designed tool to deliver consistent, effective, and insightful exercising experiences.

GCHQ Certified Training

The NCSC Certified Training scheme is designed to assure high quality cyber security training courses delivered by experienced training providers. You can access a range of cyber security training offered either in-house for your organisation, online or in the classroom.

Cyber Capability Toolkit

Cyber capability toolkit to help organisations develop plans for responding to the threat of cyber attacks.

Board Toolkit

NCSC’s Board Toolkit will provide you with the tools you need to have the necessary conversations with your IT team/supplier.

Cyber Advisor Scheme

The NCSC scheme to help organisations of all sizes access consistent, high quality cyber security advice. Resource to support with Cyber Essentials readiness and certification

Cyber Training for Staff

Free e-learning training introduces why cyber security is important and how attacks happen. It will give you actionable advice about how to defend yourself. The NCSC’s e-learning package ‘Top Tips For Staff’ can be completed online, or built into your […]