NCSC

NCSC
Name	National Cyber Security Centre
Formed	2016
Jurisdiction	United Kingdom
Headquarters	London
Parent department	Government Communications Headquarters

NCSC. The National Cyber Security Centre is the United Kingdom's authoritative body for cyber security, operating as a part of Government Communications Headquarters. It was established to consolidate and enhance the nation's cyber defence capabilities, bringing together expertise from across government and the private sector. Its mission is to make the UK the safest place to live and work online by reducing cyber security risks and responding effectively to incidents.

Overview

The NCSC acts as the UK's single point of contact for cyber security, providing guidance and support to government, industry, and the public. It works closely with other national security bodies, including the Security Service (MI5) and the Secret Intelligence Service (MI6), to protect critical national infrastructure from digital threats. The centre plays a pivotal role in implementing the UK's National Cyber Security Strategy, which is overseen by the Cabinet Office. Its work encompasses everything from issuing public alerts about vulnerabilities to conducting classified operations against hostile state actors.

History

The formation of the NCSC was announced in 2015 by then-Chancellor George Osborne and it became operational in October 2016. It consolidated several pre-existing organizations, including the Centre for Cyber Assessment, the Computer Emergency Response Team UK, and the cyber security responsibilities of the Centre for the Protection of National Infrastructure. This restructuring was a key recommendation following the UK's first Strategic Defence and Security Review to explicitly prioritize cyber threats. The creation of the NCSC mirrored similar moves by allied nations, such as the establishment of the Cybersecurity and Infrastructure Security Agency in the United States.

Functions and responsibilities

A core function is operating the CERT-UK incident response service, managing cyber attacks on UK interests. It publishes the influential Cyber Essentials certification scheme to help organizations improve their basic cyber hygiene. The centre also conducts active cyber defence programs, such as blocking malicious domains and removing phishing sites targeting UK government services. Furthermore, it provides classified threat intelligence and technical assistance to entities within the UK's Critical National Infrastructure, which includes sectors like energy, finance, and health.

Organizational structure

The NCSC is a constituent part of Government Communications Headquarters, which itself falls under the Foreign, Commonwealth & Development Office. Its leadership includes a Director who reports to the head of GCHQ. The centre is divided into several key directorates focusing on areas such as operations, technology, and national resilience. It maintains a close operational partnership with the National Crime Agency, particularly its National Cyber Crime Unit, to combat cyber-dependent crime. Staff include a blend of civil servants, military personnel, and industry secondees from companies like BAE Systems and BT Group.

International cooperation

The NCSC engages in extensive collaboration with international partners, most notably through the Five Eyes intelligence alliance with agencies like the National Security Agency and the Australian Signals Directorate. It is an active participant in NATO's cyber defence initiatives and cooperates with the European Union Agency for Cybersecurity. The centre also works bilaterally with counterparts such as France's ANSSI and Japan's National Center of Incident Readiness and Strategy for Cybersecurity to share threat intelligence and coordinate responses to global cyber incidents.

Notable incidents and operations

The NCSC played a leading role in the UK's response to the 2017 WannaCry ransomware attack, which severely impacted the National Health Service. It has repeatedly attributed malicious cyber activity to state actors, including calling out Russia's GRU for attacks on political institutions and identifying China's involvement in intellectual property theft. The centre was also instrumental in exposing the activities of the APT29 hacking group. During the 2019 general election, it provided defensive security services to political parties and advised on threats from actors potentially linked to the Internet Research Agency.

Category:Cyber security organizations Category:Government agencies established in 2016 Category:Organisations based in London