MyNCSC Help Centre
Pages
Page 17 of 22
Operating on behalf of other organisations
Your organisation is operating on behalf of another if you have full responsibility for managing some, or all, of its IT estate. The role of the other organisation, referred to as the ‘client’, is to supply any information which needs to be considered in the IT services you manage for them.
Your choice of organisation
We would generally recommend that you join your own organisation on MyNCSC. This reflects the fact that it is your organisation using the NCSC’s cyber security services (CSSs). Also, should you be using our services on behalf of multiple clients, joining every one of your client organisations on MyNCSC may be impractical.
Example
Andy works for the MSP ‘Better With Us’, in a section which manages the websites of a large number of town councils. Andy joins the Better With Us organisation on MyNCSC. He sets up a number of teams within it, one for each county represented by the MSP’s customer base.
Andy considers the alternative of joining every town council organisation on MyNCSC would quickly become unmanageable. However, he wishes to have a degree of segregation to enable easy navigation to data held by our services for a given town council and considers the one team per county approach to offer the best fit.
Authority to act on behalf of others
Each CSS must only be used in accordance with its published eligibility rule as applied to the client. You should ensure that your organisation possesses the authority to use the specific CSS on your client's IT estate.
The default CSS eligibility rules are typically based on sectors. Should your client be eligible to use a cyber security service which your organisation is not eligible for, then we can override the default eligibility rule to allow your organisation to use the CSS. Please contact us if you think this is required and has not been done. You must ensure your use of the CSS is limited to the interests of your client.
Some of our CSSs require verification of the assets on which they operate. You should ensure that verification of client assets can be arranged where necessary.