MyNCSC Help Centre
Pages
Page 16 of 22
General considerations (for all scenarios)
Searching for the organisation you want to join on MyNCSC may present you with multiple results which fully or partially match what you are looking for. The organisation might, for example, be one of a closely related group of organisations or be recognised against multiple sectors.
If a colleague has already joined the organisation on MyNCSC check the details with them and talk with your other colleagues ahead of their joining.
As a general recommendation you should select the single MyNCSC organisation you consider best matches your actual organisation with respect to:
- the name
- the sector
- the organisation with responsibility for the majority of the IT to be protected by the CSSs
- the option you and your colleagues most naturally relate to
Example
Tom’s university IT team is responsible for the IT of both the university and its student union.
Tom’s search returns options for the university, the student union and the university playgroup. He selects the university as the organisation to join, but creates a Student Union team within it.
The majority of IT to be protected is associated with the university, only a small amount is associated with the student union.
Tom considers it will be useful to clearly distinguish between the IT of the university and the student union.
Example
Emyr’s team is responsible for the IT of a Welsh local government organisation.
Following a search Emyr is presented with two options for his organisation in different sectors; ‘Local Government’ and ‘Devolved Administrations.’
Emyr selects the option with a sector of ‘Local Government’ as this is the one which he and his colleagues most naturally relate to.
You may still be left with options for your organisation in different sectors. In this situation the following list of sector ‘categories’ is useful, and we suggest you select the organisation with the sector that appears highest in the ‘categories’ on this list:
- government
- other public sector
- academia
- charity
- company
As a general rule, this should give your organisation the best chance of being eligible to use more of the CSSs.
Example
Eilish is responsible for the IT used by a charity working with people who need support to access rural transport services.
Eilish is presented with three options for her charity, with sectors of ‘Charities’, ‘Transport-Road’ and ‘Other’.
Eilish selects the option with a sector of ‘Charities’. Both ‘Charities’ and ‘Transport-Road’ are equally applicable so she selects the sector highest up the list in our guidance, giving her organisation its best chance of eligibility for our services on the strength of its charitable status.
Joining multiple organisations
Only join more than one organisation on MyNCSC when you genuinely consider this to be appropriate.
Whilst you may consider you have a claim on multiple MyNCSC organisations, it will often be easiest to use our services through one MyNCSC organisation.
Should you be in the situation where delineating different areas of your IT estate and different responsibilities amongst yourself and your colleagues will help you use the CSSs effectively, the MyNCSC functionality to set up teams within an organisation offers you the option to do so.
Example
Ciara works for a multi academy trust comprising seven academies. The trust has responsibility for managing the IT used centrally and by each of its primary academies. However, its secondary academies have responsibility for managing their IT.
Ciara joins the MyNCSC organisation for the academy. She sets up teams within it for each secondary academy.
Ciara considers use of a single organisation on MyNCSC appropriate as this will keep the trust’s interests ‘under one roof’. Use of the teams will enable involvement of her secondary academy colleagues with clear delineation of responsibilities. Otherwise, she considers the extent of the trust’s IT estate to be such that it can easily be handled at the organisation level on MyNCSC.
Example
Pip works in a county council IT team which has responsibility for managing a range of IT, including that for local authority schools within the county.
Pip joins the county council organisation on MyNCSC. She sets up a number of teams within it to cater for the council’s various IT services. These include one for primary schools IT and another for secondary schools IT.
Pip considers it appropriate to use a single organisation (the county council) on MyNCSC as her team is responsible for managing the various IT services, but uses the teams function within this as a degree of segregation will ease usability of our services. The number of schools and domains used by them is such that she considers two teams will offer the best fit for the schools IT.
You can join more than one organisation if you consider it appropriate to do so, however you should consider your circumstances carefully. We give examples in this guide to show the flexibility of MyNCSC and the teams function for sensible management of your digital asset portfolio.
Example
Hannah works for the IT team at Westside Council. Eastside Council has an agreement with Westside that Westside should manage Eastside’s IT services on its behalf. Hannah joins both the Westside Council and Eastside Council organisations on MyNCSC.
Hannah considers the option to use one MyNCSC organisation (Westside), with Westside and Eastside teams under that to enable easy delineation of the respective interests of the two councils.
However, she opts for the alternative of using both MyNCSC organisations. She considers this to be equally practical at present and might be marginally preferable should Eastside Council take on responsibility for managing its own IT at a future date.
Example
Raj works for the MSP ‘Better with Us’. As a cyber security expert, he supports the two Better with Us sections which involve his colleagues Andy and Bushra respectively.
Raj joins both the Better with Us and Large Central Government Department (LCGD) organisations on MyNCSC.
Bushra has determined that it is appropriate for her section to use the LCGD organisation on MyNCSC (see Bushra's example under 'Operating in partnership with other organisations') and Andy has determined that it is appropriate for his section to use the Better with Us organisation (see Andy's example in 'Operating on behalf of other organisations' section).
Raj needs to support both sections so joins both organisations on MyNCSC.
Unable to find your organisation
If you are unable to find your organisation in MyNCSC you can submit a request for it to be added. However, before doing so, please ensure you have used the hints and tips in the ‘Join an organisation’ journey within MyNCSC to check whether we currently have your organisation listed.
Example
Annie works for a local government organisation which is newly formed following the redrawing of boundaries for such organisations within the region.
Annie searches for her new local government organisation on MyNCSC but fails to find it. She therefore takes up the option to request that it be added.
Annie appreciates that her organisation being so new is the likely reason for it not yet appearing on MyNCSC.
She can see that MyNCSC holds the organisations which existed prior to the boundaries being redrawn. However, she considers it correct to use MyNCSC under the organisation which exists now with responsibility for managing its IT.
NCSC checks
During the ‘Join an organisation’ process, MyNCSC may contact you to request an explanation for your choice of organisation. Should an alternative choice be more appropriate it is easiest to recognise this at the outset. If you have joined the wrong organisation you will have to re-complete the process of joining an organisation and adding assets.
The NCSC reserves the right to subsequently monitor use of our services to identify any inappropriate usage.