Incident response

1 Go to resource

Incident Management

The NCSC defines a cyber security incident as:

A breach of a system’s security policy in order to affect its integrity or availability
The unauthorised access or attempted access to a system

Cyber incidents can take many forms, such as denial of service, malware, ransomware or phishing attacks.

Related resources

Scams and Frauds

Information on the different types of fraud and advice on how you can avoid becoming a victim.

Responding to a cyber incident -a guide for CEOs

This guidance helps CEOs in public and private sector organisations manage a cyber incident. It sets out aspects to consider at the start of an incident and throughout it.

Cyber Security Professionals

This guide is for those who are experts in cyber security.

Protective DNS for the private sector

Advice on the selection and deployment of protective Domain Name Systems (DNS).

Small Business Guide: Response and Recovery

Guidance that helps small to medium sized organisations prepare their response to and plan their recovery from a cyber incident.

Board Toolkit

NCSC’s Board Toolkit will provide you with the tools you need to have the necessary conversations with your IT team/supplier.