Share and Defend capability

Cyber crime and cyber enabled fraud causes harm to UK citizens and businesses. Share and Defend aims to enable protection by sharing threat intelligence data with industry (such as Internet Service Providers) who may take action on the data in order to protect their customers. 

There is no action required by the UK public and businesses to qualify for this protection. If your Internet Service Provider is a partner of Share and Defend, it's possible you will receive an increase in protection due to our partnerships and unprecedented data sharing.

The capability enables protection by working with threat intelligence providers and security vendors to consume data sets which contain malicious indicators (such as domains and URLs). Share and Defend also utilises PDNS and  Takedown data.
 
Share and Defend shares these data sets with our industry partners (including Internet Service Providers). The malicious data sets will be filtered through our partners DNS (Domain Name System) platforms, ultimately resulting in their customers - the UK public and businesses being denied access to some malicious content.
 
As an example, customers will be protected by their Internet Service Providers, against some cyber crime and cyber enabled fraud, such as malicious links embedded in a text message or URL’s embedded within a phishing email.

Although Share and Defend is taking a proactive approach to enable protection to the UK public and businesses, not all threats are known and therefore protection is only offered for known threats and ones deemed as malicious by the NCSC and our partners.

Share and Defend exists primarily to help protect the UK public and UK businesses from cyber threats. Organisations located outside the UK may only participate where they are actively supporting the protection of the United Kingdom and have obtained any necessary approval from the National Cyber Security Centre (NCSC).

The NCSC advice remains the same, we encourage users to remain vigilant and take action to stay secure online. Please follow NCSC guidance for reporting scam emails, texts, phone calls, websites and adverts. 

Benefits of the NCSC Share and Defend capability include:

• Through enabling data sharing, an additional layer of protection is potentially offered  for members of the UK Public and businesses who fall victim to certain cyber crimes and cyber enabled fraud. 
• Taking a proactive approach and working with industry to disrupt cyber criminals and ensure the UK is the safest place to live and work online. 
• Sharing of data enables fast protection whilst other NCSC ACD (Active Cyber Defence) services such as Takedown address the threat directly.