Disruptive cyber attacks – reducing their impact, reducing the risk
How to recover your organisation, be better prepared for future incidents and make them less likely.
Pages
Page 16 of 16
5. Detecting and responding to attacks quickly
In addition to prevention and containment, you should use services that help detect and disrupt malicious activity.
To improve detection, the NCSC recommends the following services:
Protective DNS (PDNS) services which prevent systems from connecting to known malicious domains. This can stop malware communicating with attackers and reduce the impact of an incident. The NCSC provides a PDNS service for the public sector, and commercial PDNS services are available for private sector organisations.
The NCSC’s free Early Warning service which provides alerts based on trusted data sources to help identify threats affecting your network.
