
Cyber Incident Response
Members of this scheme offer NCSC assured Cyber Incident Response services to a wide range of organisations.
If your organisation has been a victim of a cyber security incident, find out how to get the support you need to recover and minimise further harm.
There are a number of NCSC assured Cyber Incident Response (CIR) companies that can help you deal with a cyber incident. These companies can help by determining the extent of the incident, managing its immediate impact, and increasing network security.
Members of this scheme offer NCSC assured Cyber Incident Response services to a wide range of organisations.
There are two levels of NCSC Assured Cyber Incident Response that can help organisations recover from an incident. NCSC Assured Service Providers operating at the technical standard required for CIR Enhanced Level will also be technically competent in providing the incident response services required by CIR Standard Level. If unsure of which level to select, see Information for buyers section.
The government has an online service that will tell you where best to report an incident depending on the type and severity of incident.
Did you know that any UK based organisation with a turnover under £20m that achieves Cyber Essentials certification (covering their whole organisation), is entitled to free Cyber Liability Insurance.
The insurance offers a 24hr helpline to report a cyber incident, which will provide crisis management and incident response to the total liability limit of £25,000. Find out more on our Cyber Essentials Delivery Partners website.
For more information on responding to cyber attacks there is NCSC guidance to help you.
Resources for individuals and organisations who have experienced a cyber attack.
Guidance that helps small to medium sized organisations prepare their response to and plan their recovery from a cyber incident.
Ransomware is a type of malware which prevents you from accessing your device and the data stored on it, usually by encrypting your files. A criminal group will then demand a ransom in exchange for decryption.


