NCSC Annual Review 2025
Looking back at the National Cyber Security Centre's ninth year and its key developments and highlights, between 1 September 2024 and 31 August 2025.
Page 12 of 32
Chapter 02: Resilience at scale
Building cyber resilience, growing the economy
The NCSC’s objective to raise national resilience is about enabling the UK to withstand and recover from cyber threats – across society, the economy, and critical infrastructure. With the severity of incidents rising, effective vulnerability management is more important than ever. Our tools, partnerships, and NCSC-recognised industry services are also helping to grow the economy by strengthening the digital foundations that businesses, public services and innovation depend on.
Our future offerings will look to build on the existing catalogue by focusing on the things that the NCSC is uniquely positioned to do, thanks to our deep ties with industry and academia. We are looking at two key areas:
-
Focus on user need, efficacy and evidence
We are investing in user research and data science expertise to further mature our understanding of the interventions that make a positive difference to the cyber security of organisations across the UK. We are committed to automating that evidence base and making it transparent, to invite and encourage challenge and review.
-
Innovation and experimentation
The second phase of our Active Cyber Defence (ACD) initiative aims to focus the NCSC’s efforts on developing services that cannot currently be met by the commercial market, and/or where we can bring a unique contribution as part of GCHQ.