NCSC Annual Review 2025
Looking back at the National Cyber Security Centre's ninth year and its key developments and highlights, between 1 September 2024 and 31 August 2025.
Page 7 of 32
The NCSC at a glance
Our mission is to make the UK the safest place to live and work online so that everyone – whether at work or at home – can navigate the cyber landscape safely and with confidence.
Since 2016, the National Cyber Security Centre (NCSC) has safeguarded the UK’s critical systems and online services, delivering world-leading guidance, tools and frameworks for business and citizens alike. When cyber attacks occur – or services are disrupted – we work with industry to provide incident response, restore operations and help organisations get back on their feet.
The NCSC was formed by combining separate parts of government, MI5 and GCHQ to create the National Technical Authority for cyber security. We lead the UK’s defence against the most advanced cyber threats, including those from nation states, hackers, and cyber criminals.
The NCSC works closely with international allies, law enforcement and the UK’s intelligence and security agencies to ensure we understand the cyber threat, and how we can defend against it. We also harness talent across schools, universities, and the tech community, driving research into emerging technologies to explore new ways to reduce harm at scale. At the same time, we are investing in the UK’s national security by nurturing the next generation of expertise that the expanding cyber security sector needs to thrive.
A shared responsibility
Whether you’re working for critical infrastructure making sure the lights stay on, or simply setting up your child’s phone, the UK’s cyber security is a shared responsibility where everyone needs to play a part. Only then can we stay ahead of the cyber criminals and hostile states that seek to do us harm.
What is cyber security?
Cyber security helps individuals and organisations reduce the risk and impact of cyber attacks. Its core function is to defend the digital services and devices we rely on from online threats, which includes safeguarding the vast amounts of data and personal information stored locally or in the cloud. Cyber security also ensures that innovative and emerging technologies can be securely deployed so the opportunities they present can be fully realised.
Why is cyber security important?
Cyber security matters because most organisations in the UK rely on digital technology to function. It ensures the UK’s critical national infrastructure continues to operate in our increasingly connected world, and that governments can provide essential services.
Cyber security should therefore be a key part of every organisation’s operational resilience.
Organisations that suffer a cyber attack or data breach can expect financial losses, lengthy service disruption, regulatory response and reputational damage. Cyber security should therefore be a key part of every organisation’s operational resilience. When it's done well, cyber security can be a catalyst for innovation and an enabler of growth, not just a ‘necessary evil’ or compliance function.
On an individual level, phones, smart devices, online services and the wider internet are now a fundamental part of modern life. Cyber security can prevent criminals from accessing our accounts and services, and helps us to navigate our online lives, safely and with confidence.