NCSC publishes new guidance on severe and disruptive cyberattacks

The National Cyber Security Agency (NCSC) has published new guidance providing a framework for organisations to respond to and recover from highly disruptive data breaches. As cyber threats increase in scale and sophistication, the framework aims to help businesses prepare for and navigate the most severe cyberattacks.

The guidance is divided into three sections covering the entire lifecycle of an incident. It addresses managing the initial hours and days following a breach, building and implementing a recovery programme to restore normal operations, and the critical need for advance preparation and practice.

Acknowledging the emotional toll such events take on personnel, the NCSC stresses that victim organisations must actively support staff from the outset while mitigating the broader impacts. The guidance reassures businesses that full recovery from severe cyberattacks is possible by systematically understanding the breach, managing its consequences, and executing a structured recovery plan.

Training Announcement: The BCS Foundation Certificate in Information Security Management Principles (CISMP) is an entry-level programme aligned with ISO/IEC 27001 and Cyber Essentials that examines the fundamental concepts, technologies and principles of information security management. It provides attendees with practical knowledge of key concepts and techniques in risk management, security operations, and technical, physical, and environmental security. In addition, CISMP addresses legal and regulatory requirements, business continuity and disaster recovery planning, and emerging technologies. Find out more.