New ‘Cyber Incident Response’ scheme launched

A new scheme that will provide access to companies certified to respond effectively to the consequences of cybersecurity attacks has been launched by CESG – the Information Assurance arm of GCHQ – and the Centre for the Protection of National Infrastructure (CPNI).

Called ‘Cyber Incident Response’, the initiative will be a HMG quality-assured service provided by industry that organisations can turn to for assistance when they have suffered a cybersecurity incident. While the scheme is primarily aimed at the public sector and organisations forming part of the UK’s critical national infrastructure, it may also be of assistance to the wider private sector.
The pilot scheme includes four companies selected by CESG/CPNI to work in partnership, based on knowledge and experience, to provide response services – BAE Systems Detica, Cassidian, Context IS and Mandiant.

Cyber Incident Response builds on the ‘Ten Steps to Cyber Security’ that was launched by the Government in September and provides advice to business leaders on increasing cybersecurity within their own organisations. It also supports the delivery of the UK Cyber Security Strategy.

By taking this joint approach on response to cyber incidents, government and industry aims to help nurture and grow the emerging UK cyber incident response industry. This should set it on a growth path in terms of scale and expertise, which in turn will support the security and prosperity of the UK.

Chloë Smith, Minister for Cyber Security, said: “The growing cyber threat makes it inevitable that some attacks will get through, either where basic security is not implemented, or when an organisation is targeted by a highly capable attacker. Cyber Incident Response services provide access to organisations certified by CESG/CPNI to respond effectively to cyber incidents. It builds on the ‘Ten steps to Cyber Security’ guidance on how to reduce the risk of vulnerability to attack.”
The UK Cyber Security Strategy sets out how the UK will support economic prosperity, protect national security and safeguard the public’s way of life by building a more trusted and resilient digital environment (www.cabinetoffice.gov.uk/ resource-library/cyber-security-strategy).