Incident response

1 Go to resource

Early Warning Service

The NCSC provides a free service to organisations to inform them of threats against their network. This service will notify you on all cyber attacks detected by the feed suppliers against your organisation and is designed to compliment your existing security controls. Early Warning is open to all UK organisations who hold a static IP address or domain name.

Related resources

Exercise in a box

Online resources to help organisations test cyber resilience and practice response to attacks.

Cyber Resilience Strategy 2015-2020: Progress Report

This report entitled ‘Firm foundations’ highlights the progress of ‘Safe, Secure and Prosperous: A Cyber Resilience Strategy for Scotland’ (2015-2020).

TTX Gym

Open source platform which can be used to to help facilitate desktop exercises, including common cyber scenarios

Cyber Capability Toolkit

Cyber capability toolkit to help organisations develop plans for responding to the threat of cyber attacks.

Protective DNS for the private sector

Advice on the selection and deployment of protective Domain Name Systems (DNS).

Incident Management

The NCSC defines a cyber security incident as: A breach of a system’s security policy in order to affect its integrity or availability The unauthorised access or attempted access to a system Cyber incidents can take many forms, such as […]