NCSC launches Cyber Adversary Simulation scheme for critical UK organisations
Original title: NCSC scheme will help critical organisations test their cyber defences
Assured suppliers run customer-specific attack plans so operators of essential services can test prevention, detection and response.
The UK NCSC launched the Cyber Adversary Simulation (CyAS) scheme to assure commercial providers that test how critical organisations and oversight bodies prevent, detect and respond to simulated attacks. Providers are assessed against an NCSC standard and start with reconnaissance to build realistic, customer-specific plans rather than relying only on bought threat intelligence or fixed TTPs. CyAS starts as a minimum viable product and sits alongside the Cyber Assessment Framework and Cyber Resilience Audit scheme. Assured providers are listed on the scheme’s Find a Provider page.
- Providers must meet an NCSC-defined standard before organisations buy their services.
- Testing is meant to go beyond traditional penetration testing and control audits.
- The scheme was developed with regulators and lead government departments.
- It begins as an MVP so NCSC can test demand and refine the method.
- 1.Review assured CyAS providers on the NCSC Find a Provider page.
- Organizations
- NCSC
- Countries
- United Kingdom
From the original article
2 min read at ncsc.gov.uk
New NCSC Cyber Adversary Simulation scheme will help critical organisations strengthen their resilience through rigorous, real-world testing by trusted providers.
ncsc.gov.uk
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.