Cyber Adversary Simulation (CyAS): scheme documents now available
NCSC published adversary simulation guidance and the first Cyber Adversary Simulation (CyAS) scheme documents ahead of the scheme's November 2026 launch.
The UK NCSC released guidance on adversary simulation engagements and the first CyAS scheme documents, including the Scheme Standard and the Working Practices Document. The capability-led scheme, developed with cyber oversight bodies, will formally launch in November 2026 and assess companies seeking NCSC-assured provider status. NCSC describes the current version as a minimum viable product to be refined with feedback from buyers and providers.
- CyAS scheme launches November 2026; current documents described as a minimum viable product.
- Guidance covers planning, controlling, delivering, and reporting adversary simulation engagements.
- Capability-led standard requires tailored reconnaissance and bespoke approaches, not fixed attack scripts.
- Vendors
- NCSC
- Products
- CyAS
- Countries
- United Kingdom
From the original article
2 min read at ncsc.gov.uk
Our view of good cyber adversary simulation – and how assured providers can deliver it.
ncsc.gov.uk
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.