Advancing UK Aerospace, Defence, Security & Space Solutions Worldwide
  • Home
  • /
  • Security
  • /
  • NCSC seeks companies to develop cyber assurance scheme

Security

NCSC seeks companies to develop cyber assurance scheme

The National Cyber Security Centre (NCSC) is seeking companies to help develop the assurance scheme for new Cyber Incident Response and Cyber Incident Exercising Services.

Image courtesy NCSC

The NCSC is conducting a market engagement exercise to develop a new scheme that will assure a new Cyber Incident Response Service and a new Cyber Incident Exercising Service.

The new NCSC Assured Cyber Incident Response Level 2 and Cyber Incident Exercising Scheme will provide a route for businesses offering cyber incident response and cyber incident exercising services, to have those services assured against NCSC Standards.

Advertisement
ODU RT

The Cyber Incident Response Level 2 Service will assure incident response services that are offered by companies to local government and large, medium and small businesses. It will complement and extend the NCSC’s existing CIR Service (shortly to be re-branded as the Cyber Incident Response Level 1 Service) which currently supports UK Central Government and large businesses with complex IT systems.

The Cyber Incident Exercising Service will assure scenario-based exercising services, covering table-top and live-play formats, that are offered by companies to large and medium sized organisations and UK Government (central and regional) who want to practice, evaluate and improve their cyber incident response plans in a safe environment.

Companies wishing to provide these new service offerings to end users and who can demonstrate that they meet NCSC standards, will be referred to as Assured Service Providers.

Service Providers can choose to offer both the Cyber Incident Response Level 2 Service and the Cyber Incident Exercising Service, or to specialise in the delivery of one of those services.

The Service Providers will be administered by Assured Scheme Partners who will engage candidate Service Providers, assess them against NCSC standards, on-board successful candidates and assure the ongoing quality of the Service Providers’ service.

These Scheme Partners will be required to administer both the Cyber Incident Response Level 2 Service and the Cyber Incident Exercising Service. A Scheme Partner will not be allowed to operate as a Service Provider.

Market engagement exercise
The NCSC is now inviting prospective Assured Scheme Partners to participate in a market engagement exercise to review and contribute to the final design of the new scheme. This is likely to include reviewing:

  • the proposed operating model
  • how NCSC’s technical standards for the two services will be implemented
  • how management information will be collected.
Advertisement
ODU RT 2

If you represent a company that might be a prospective Assured Scheme Partner and would like to participate in the market engagement exercise, please email to register your interest Comm.Schemes@ncsc.gov.uk by providing details of your company.

If you are likely to be interested in becoming an Assured Service Provider rather than an Assured Scheme Partner, please do not apply to participate in the market engagement exercise but instead wait until we announce the launch of the scheme, probably during Q2 2022. At that time NCSC will announce that the scheme is open for applications from potential Service Providers.

Not taking part in the market engagement will not exclude companies from applying to be Assured Scheme Partners or Assured Service Providers when the scheme is launched.

The closing date for submissions to join the market engagement is Friday 12th November 2021, at 5pm.
 

 

 

Advertisement
General Atomics LB General Atomics LB
Babcock completes deep maintenance of Lambeth River Station

Security

Babcock completes deep maintenance of Lambeth River Station

1 November 2024

Babcock has successfully completed a deep maintenance programme for the London Fire Brigade’s (LFB) Lambeth river station.

Five Eyes launch shared security advice campaign for tech startups

Defence Security

Five Eyes launch shared security advice campaign for tech startups

1 November 2024

The Secure Innovation security guidance is being utilised across the Five Eyes intelligence partnership demonstrating the increased commitment between the nations involved.

Emergency services tackle fire at BAE Systems

Security Defence

Emergency services tackle fire at BAE Systems' Barrow-in-Furness site

30 October 2024

Cumbria Police and other emergency services have attended a fire at BAE Systems' Barrow-in-Furness site, which took hold in the early hours of this morning.

Peli introduces VAULT range of rugged cases

Aerospace Defence Security Space

Peli introduces VAULT range of rugged cases

30 October 2024

Peli Products has announced the launch of its new VAULT by Peli collection.

Advertisement
ODU RT
Reforms target confidence in police accountability system

Security

Reforms target confidence in police accountability system

30 October 2024

Confidence in the police and in the systems that hold them to account, will be boosted under a package of reforms announced by the Home Secretary last week.

Isle of Wight gets new coastguard station

Security

Isle of Wight gets new coastguard station

30 October 2024

After around 40 years in the same station, a coastguard rescue team on the Isle of Wight has a new home.

Advertisement
ODU RT 2