Incident response

1 Go to resource

Incident Management

The NCSC defines a cyber security incident as:

A breach of a system’s security policy in order to affect its integrity or availability
The unauthorised access or attempted access to a system

Cyber incidents can take many forms, such as denial of service, malware, ransomware or phishing attacks.

Related resources

Supply Chain Security Guidance

Proposing a series of 12 principles, designed to help you establish effective control and oversight of your supply chain.

TTX Gym

Running a cyber security exercise is an immersive, effective way to evaluate and practise response skills. Yet, designing and facilitating exercises is complex. TTX Gym provides a custom-designed tool to deliver consistent, effective, and insightful exercising experiences.

Cyber Resilience and Internet Safety

Helpful resources which practitioners and educators can use with learners and to support learning at home on the topics of cyber resilience and internet safety.

Cyber Training for Staff

Free e-learning training introduces why cyber security is important and how attacks happen. It will give you actionable advice about how to defend yourself. The NCSC’s e-learning package ‘Top Tips For Staff’ can be completed online, or built into your […]

Cyber Capability Toolkit

Cyber capability toolkit to help organisations develop plans for responding to the threat of cyber attacks.

Cybercrime Investigations and Digital Forensics

National coverage providing expertise and specialist support to Local Policing and other departments. This includes technical assistance in the examination and analysis of digital devices. Both departments provide specialist support for National Online Child Abuse Protection (NOCAP) investigations, work closely […]