Incident response

1 Go to resource

Incident Management

The NCSC defines a cyber security incident as:

A breach of a system’s security policy in order to affect its integrity or availability
The unauthorised access or attempted access to a system

Cyber incidents can take many forms, such as denial of service, malware, ransomware or phishing attacks.

Related resources

Supply Chain Security Guidance

Proposing a series of 12 principles, designed to help you establish effective control and oversight of your supply chain.

Public Sector

Cyber security guidance for public sector organisations employees.

The Cyber Assessment Framework (CAF) / NCSC CAF Guidance

The Cyber Assessment Framework (CAF) provides guidance for organisations responsible for vitally important services and activities.

Cybercrime Investigations and Digital Forensics

National coverage providing expertise and specialist support to Local Policing and other departments. This includes technical assistance in the examination and analysis of digital devices. Both departments provide specialist support for National Online Child Abuse Protection (NOCAP) investigations, work closely […]

Reports and Advisories

The NCSC’s response, reports and advisories on cyber security matters affecting the UK.

Child Protection

Child protection means protecting a child from abuse or neglect, which may cause significant harm. Police Scotland has some advice and information on how to report child abuse or neglect.