12/04/2024

NEW GUIDE: NATIONAL CYBER SECURITY CENTRE GUIDE RESPONDING TO A CYBER INCIDENT (11 April 2024)

In this modern era and dependence on technology cyber security is one the biggest issues facing businesses.

As such we thought it important to draw Organisations attention to this new guidance published by the National Cyber Security Centre (NCSC), is important as it helps CEOs in public and private sector organisations manage a cyber incident.

The NCSC was launched in October 2016, is the go-to Organisation for cyber security and provides a single point of contact for SMEs, larger organisations, government agencies, the general public and departments.

The Responding to a cyber incident – a guide for CEOs  is divided into 10 sections covering:-

1. Who is this guidance for?
2. Why do I need this guidance?
3. Put in place proportionate and effective governance.
4. Bring in resources for advice and support.
5. Consider the impact of a data breach.
6. Think about your public messaging.
7. In a ransomware attack, consider the risks of making a payment.
8. Consider team resilience and welfare.
9. Review the lessons learned.
10. Report it.

It is a short and straightforward Guide and will assist in navigating the steps in the aftermath of a cyber incident.

Under review of the lessons learned it refers to the Cyber Security Toolkit for Boards and recommends embedding cyber resilience and risk management through the whole organisation, including your people, systems, processes and technologies and is a good starting point.

Whilst not strictly employment law given the importance of this area we thought it prudent to bring this guidance to your attention.