Incident response

1 Go to resource

Incident Management

The NCSC defines a cyber security incident as:

A breach of a system’s security policy in order to affect its integrity or availability
The unauthorised access or attempted access to a system

Cyber incidents can take many forms, such as denial of service, malware, ransomware or phishing attacks.

Related resources

TTX Gym

Running a cyber security exercise is an immersive, effective way to evaluate and practise response skills. Yet, designing and facilitating exercises is complex. TTX Gym provides a custom-designed tool to deliver consistent, effective, and insightful exercising experiences.

Cyber Resilience Framework

Provide a common, effective way for Scottish public sector organisations to assess their cyber resilience arrangements, identify areas of strength and weakness, gain reasonable confidence that they are adhering to minimum cyber resilience requirements, and take decisions on how/whether to […]

Police Scotland’s Cyber Security Strategy 2020

This strategy sets out how Police Scotland will take a proactive approach to respond to cyber demand, ensuring that we are future focused and able to adapt our policing model to suit the needs of the communities they serve.

Sextortion Guidance

Sextortion is sexual extortion where the victim is exploited through threat of the exposure of intimate images and is usually for financial gain or as a means of controlling behaviour. Police Scotland have provided information and advice on how to […]

Public Sector

Cyber security guidance for public sector organisations employees.

Individuals & Families

The NCSC’s cyber security advice to protect you and your family, and the technology you rely on.