Misplaced Pages

National Cyber Security Centre (United Kingdom): Difference between revisions

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.
Browse history interactively← Previous editContent deleted Content addedVisualWikitext
Revision as of 00:31, 10 July 2023 editBobrayner (talk | contribs)Autopatrolled, Extended confirmed users, Pending changes reviewers, Rollbackers53,706 edits See also: Plus one← Previous edit Latest revision as of 13:16, 7 October 2024 edit undo2a02:a464:d822:1:5c4f:97f2:4121:9cf6 (talk)No edit summary 
(19 intermediate revisions by 17 users not shown)
Line 8: Line 8:
| nativename_r = | nativename_r =
| logo = NCSC_(UK)_logo.png | logo = NCSC_(UK)_logo.png
| logo_width = 250px | logo_width =
| logo_caption = | logo_caption =
| seal = | seal =
Line 20: Line 20:
| jurisdiction = | jurisdiction =
| headquarters = ], England, United Kingdom | headquarters = ], England, United Kingdom
| employees = >1000<ref name="PAC2019">{{cite web|title=Cyber security in the UK|url=https://publications.parliament.uk/pa/cm201719/cmselect/cmpubacc/1745/1745.pdf|website=House of Commons|publisher=Committee of Public Accounts|date=15 May 2019|access-date=1 August 2020|archive-date=27 November 2020|archive-url=https://web.archive.org/web/20201127125114/https://publications.parliament.uk/pa/cm201719/cmselect/cmpubacc/1745/1745.pdf|url-status=live}}</ref> | employees = >1,000<ref name="PAC2019">{{cite web|title=Cyber security in the UK|url=https://publications.parliament.uk/pa/cm201719/cmselect/cmpubacc/1745/1745.pdf|website=House of Commons|publisher=Committee of Public Accounts|date=15 May 2019|access-date=1 August 2020|archive-date=27 November 2020|archive-url=https://web.archive.org/web/20201127125114/https://publications.parliament.uk/pa/cm201719/cmselect/cmpubacc/1745/1745.pdf|url-status=live}}</ref>
| budget = £1.9 billion (National Cyber Security Strategy, 2016–2021)<ref name="PAC2019" /> | budget = £1.9 billion (National Cyber Security Strategy, 2016–2021)<ref name="PAC2019" />
| parent_agency = ] | parent_agency = ]
Line 27: Line 27:
| minister2_name = | minister2_name =
| minister2_pfo = | minister2_pfo =
| chief1_name = ] | chief1_name = Richard Horne
| chief1_position = CEO | chief1_position = Acting CEO
| chief2_name = Dr Ian Levy | chief2_name = Felicity Oswald
| chief2_position = Technical Director | chief2_position = Chief Operating Officer (COO)
| chief3_name = Paul Chichester
| chief3_position = Director of Operations
| chief4_name = Chris Ensor
| chief4_position = Deputy Director for Cyber Growth
| chief5_name = Eleanor Fairford
| chief5_position = Deputy Director for Incident Management
| chief6_name = Marsha Quallo-Wright
| chief6_position = Deputy Director – Delivery, Engineering and Crypt-Key
| chief7_name = Jonathon Ellison
| chief7_position = Director for National Resilience and Future Technology
| chief8_name = Ollie Whitehouse
| chief8_position = Chief Technical Officer
| child1_agency = | child1_agency =
| child2_agency = | child2_agency =
Line 37: Line 49:
}} }}


The '''National Cyber Security Centre''' ('''NCSC''') is an organisation of the ] that provides advice and support for the ] and ] in how to avoid ] threats. Based in ], it became operational in October 2016, and its parent organisation is ].<ref>{{cite web|author1=HM Government|title=National Cyber Security Strategy 2016-2021|url=https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/564268/national_cyber_security_strategy.pdf|website=gov.uk|access-date=2 November 2016|date=1 November 2016|archive-date=1 November 2016|archive-url=https://web.archive.org/web/20161101141935/https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/564268/national_cyber_security_strategy.pdf|url-status=live}}</ref> The '''National Cyber Security Centre''' ('''NCSC''') is an organisation of the ] that provides advice and support for the ] and ] in how to avoid ] threats. It is the UK's National technical authority for ] and ]. Based in ], it became operational in October 2016, and its parent organisation is ].<ref>{{cite web|author1=HM Government|title=National Cyber Security Strategy 2016-2021|url=https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/564268/national_cyber_security_strategy.pdf|website=gov.uk|access-date=2 November 2016|date=1 November 2016|archive-date=1 November 2016|archive-url=https://web.archive.org/web/20161101141935/https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/564268/national_cyber_security_strategy.pdf|url-status=live}}</ref>


==History== ==History==
The NCSC absorbed and replaced ] (the information security arm of GCHQ), the Centre for Cyber Assessment (CCA), Computer Emergency Response Team UK (CERT UK) and the cyber-related responsibilities of the ] (CPNI).<ref>{{cite web|title=About us|url=https://www.ncsc.gov.uk/about-us|publisher=National Cyber Security Centre|access-date=9 March 2017|archive-date=12 March 2017|archive-url=https://web.archive.org/web/20170312044051/https://www.ncsc.gov.uk/about-us|url-status=live}}</ref> It built on earlier efforts of these organisations and the ] to provide guidance on ] to the UK's wider private sector, such as the "10 Steps" guidance released in January 2015. In pre-launch announcements, the UK government stated that the NCSC would first work with the ] to advise financial institutions on how to bolster online defences.<ref>{{cite news|last1=Corera|first1=Gordon|title=Bank of England to work with new cybersecurity body|url=https://www.bbc.co.uk/news/technology-35843218|access-date=19 March 2016|publisher=BBC News|date=18 March 2016|archive-date=31 December 2017|archive-url=https://web.archive.org/web/20171231181415/http://www.bbc.co.uk/news/technology-35843218|url-status=live}}</ref> The NCSC absorbed and replaced ] (the ] arm of GCHQ), the Centre for Cyber Assessment (CCA), Computer Emergency Response Team UK (CERT UK) and the cyber-related responsibilities of the ] (CPNI).<ref>{{cite web|title=About us|url=https://www.ncsc.gov.uk/about-us|publisher=National Cyber Security Centre|access-date=9 March 2017|archive-date=12 March 2017|archive-url=https://web.archive.org/web/20170312044051/https://www.ncsc.gov.uk/about-us|url-status=live}}</ref> It built on earlier efforts of these organisations and the ] to provide guidance on ] to the UK's wider private sector, such as the "10 Steps" guidance released in January 2015. In pre-launch announcements, the UK government stated that the NCSC would first work with the ] to advise financial institutions on how to bolster online defences.<ref>{{cite news|last1=Corera|first1=Gordon|title=Bank of England to work with new cybersecurity body|url=https://www.bbc.co.uk/news/technology-35843218|access-date=19 March 2016|publisher=BBC News|date=18 March 2016|archive-date=31 December 2017|archive-url=https://web.archive.org/web/20171231181415/http://www.bbc.co.uk/news/technology-35843218|url-status=live}}</ref>


The centre was first announced in November 2015 by the ], ]. The existing Director General Cyber of GCHQ, Ciaran Martin, leads the new centre, and GCHQ's current Technical Director of Cyber Security, Dr Ian Levy, assumed the same role at the NCSC.<ref>{{cite news|last1=Jones|first1=Sam|title=UK launches National Cyber Security Centre|url=http://www.ft.com/cms/s/0/b33d4c6e-ed0c-11e5-888e-2eadd5fbc4a4.html#axzz43M43Sd3m|access-date=19 March 2016|work=Financial Times|date=18 March 2016|archive-date=29 May 2016|archive-url=https://web.archive.org/web/20160529094018/http://www.ft.com/cms/s/0/b33d4c6e-ed0c-11e5-888e-2eadd5fbc4a4.html#axzz43M43Sd3m|url-status=live}}</ref> A detailed paper on the creation of the NCSC, including a description of its structure and future challenges, written by the then Director of GCHQ, ], who is widely credited with establishing the centre, was published by the ] in February 2019.<ref>{{Cite web |date=2019-02-27 |title=Organising a Government for Cyber: The Creation of the UK's National Cyber Security Centre |url=https://rusi.org/publication/occasional-papers/organising-government-cyber-creation-uks-national-cyber-security |access-date=2019-03-17 |website=RUSI |language=en |archive-url=https://web.archive.org/web/20190517180212/https://rusi.org/publication/occasional-papers/organising-government-cyber-creation-uks-national-cyber-security |archive-date=17 May 2019 |url-status=dead}}</ref> The centre was first announced in November 2015 by the ], ]. The existing Director General Cyber of GCHQ, Ciaran Martin, leads the new centre, and GCHQ's current Technical Director of Cyber Security, Dr Ian Levy, assumed the same role at the NCSC.<ref>{{cite news|last1=Jones|first1=Sam|title=UK launches National Cyber Security Centre|url=http://www.ft.com/cms/s/0/b33d4c6e-ed0c-11e5-888e-2eadd5fbc4a4.html#axzz43M43Sd3m|access-date=19 March 2016|work=Financial Times|date=18 March 2016|archive-date=29 May 2016|archive-url=https://web.archive.org/web/20160529094018/http://www.ft.com/cms/s/0/b33d4c6e-ed0c-11e5-888e-2eadd5fbc4a4.html#axzz43M43Sd3m|url-status=live}}</ref> A detailed paper on the creation of the NCSC, including a description of its structure and future challenges, written by the then Director of GCHQ, ], who is widely credited with establishing the centre, was published by the ] in February 2019.<ref>{{Cite web |date=2019-02-27 |title=Organising a Government for Cyber: The Creation of the UK's National Cyber Security Centre |url=https://rusi.org/publication/occasional-papers/organising-government-cyber-creation-uks-national-cyber-security |access-date=2019-03-17 |website=RUSI |language=en |archive-url=https://web.archive.org/web/20190517180212/https://rusi.org/publication/occasional-papers/organising-government-cyber-creation-uks-national-cyber-security |archive-date=17 May 2019 |url-status=dead}}</ref>
Line 51: Line 63:


On 1 October 2020 Lindy Cameron, formerly director-general of the ], took over from ] as CEO.<ref name=newstatesman-20200728>{{cite news |url=https://tech.newstatesman.com/security/lindy-cameron-ncsc-ceo-ciaran-martin |title=NIO's Lindy Cameron to succeed Ciaran Martin as NCSC CEO |last=Williams |first=Oscar |newspaper=New Statesman |date=28 July 2020 |access-date=28 July 2020 |archive-date=29 July 2020 |archive-url=https://web.archive.org/web/20200729011516/https://tech.newstatesman.com/security/lindy-cameron-ncsc-ceo-ciaran-martin |url-status=live }}</ref><ref name=telegraph-20200728>{{cite news |url=https://www.telegraph.co.uk/politics/2020/07/28/ex-diplomat-next-cyber-security-ceo/ |title=Ex-diplomat to be next cyber security CEO |last=Sheridan |first=Danielle |newspaper=The Daily Telegraph |url-access=subscription |date=28 July 2020 |access-date=28 July 2020 |archive-date=29 July 2020 |archive-url=https://web.archive.org/web/20200729001033/https://www.telegraph.co.uk/politics/2020/07/28/ex-diplomat-next-cyber-security-ceo/ |url-status=live }}</ref><ref>{{Cite web|title=NCSC announces Lindy Cameron as new CEO|url=https://www.ncsc.gov.uk/news/new-ceo-lindy-cameron|access-date=2020-08-26|website=www.ncsc.gov.uk|language=en|archive-date=24 June 2021|archive-url=https://web.archive.org/web/20210624200405/https://www.ncsc.gov.uk/news/new-ceo-lindy-cameron|url-status=live}}</ref> On 1 October 2020 Lindy Cameron, formerly director-general of the ], took over from ] as CEO.<ref name=newstatesman-20200728>{{cite news |url=https://tech.newstatesman.com/security/lindy-cameron-ncsc-ceo-ciaran-martin |title=NIO's Lindy Cameron to succeed Ciaran Martin as NCSC CEO |last=Williams |first=Oscar |newspaper=New Statesman |date=28 July 2020 |access-date=28 July 2020 |archive-date=29 July 2020 |archive-url=https://web.archive.org/web/20200729011516/https://tech.newstatesman.com/security/lindy-cameron-ncsc-ceo-ciaran-martin |url-status=live }}</ref><ref name=telegraph-20200728>{{cite news |url=https://www.telegraph.co.uk/politics/2020/07/28/ex-diplomat-next-cyber-security-ceo/ |title=Ex-diplomat to be next cyber security CEO |last=Sheridan |first=Danielle |newspaper=The Daily Telegraph |url-access=subscription |date=28 July 2020 |access-date=28 July 2020 |archive-date=29 July 2020 |archive-url=https://web.archive.org/web/20200729001033/https://www.telegraph.co.uk/politics/2020/07/28/ex-diplomat-next-cyber-security-ceo/ |url-status=live }}</ref><ref>{{Cite web|title=NCSC announces Lindy Cameron as new CEO|url=https://www.ncsc.gov.uk/news/new-ceo-lindy-cameron|access-date=2020-08-26|website=www.ncsc.gov.uk|language=en|archive-date=24 June 2021|archive-url=https://web.archive.org/web/20210624200405/https://www.ncsc.gov.uk/news/new-ceo-lindy-cameron|url-status=live}}</ref>

In December 2023, it was announced that Lindy Cameron would step down in early 2024.<ref>{{Cite web |title=NCSC CEO Lindy Cameron to step down in 2024 {{!}} Computer Weekly |url=https://www.computerweekly.com/news/366563224/NCSC-CEO-Lindy-Cameron-to-step-down-in-2024 |access-date=2024-01-06 |website=ComputerWeekly.com |language=en}}</ref>

In July 2024, the Centre in collaboration with international partners, revealed a North Korean state-sponsored cyber espionage campaign, aimed at stealing military and nuclear secrets. The advisory highlighted the actions of the Andariel group, linked to the DPRK’s ]'s 3rd Bureau, targeting critical infrastructure globally to steal sensitive information and intellectual property. NCSC’s Director of Operations, Paul Chichester, emphasized the significance of protecting such data. Andariel's focus was primarily on sectors like defense, aerospace, nuclear, and engineering, with some attention to the medical and energy sectors. They also launched ransomware attacks against US healthcare organizations to fund further espionage. The advisory included technical details and mitigation strategies, urging network defenders to implement robust protections. The advisory was jointly issued by multiple agencies, including the NCSC, FBI, CISA, NSA, and Korean counterparts.<ref>{{cite news|last=Allison |first= George |title=UK and allies expose North Korean cyber campaign |date=30 July 2024 |url=https://ukdefencejournal.org.uk/uk-and-allies-expose-north-korean-cyber-campaign/ |website=UK Defence Journal |access-date=1 August 2024}}</ref>


=== List of chief executives === === List of chief executives ===
Line 63: Line 79:
* ] * ]
* ] * ]
* ]


==References== ==References==
Line 82: Line 99:
] ]
] ]
]

Latest revision as of 13:16, 7 October 2024

Organisation of the UK Government

National Cyber Security Centre (NCSC)
Agency overview
Formed3 October 2016; 8 years ago (3 October 2016)
HeadquartersVictoria, London, England, United Kingdom
Employees>1,000
Annual budget£1.9 billion (National Cyber Security Strategy, 2016–2021)
Agency executives
  • Richard Horne, Acting CEO
  • Felicity Oswald, Chief Operating Officer (COO)
  • Paul Chichester, Director of Operations
  • Chris Ensor, Deputy Director for Cyber Growth
  • Eleanor Fairford, Deputy Director for Incident Management
  • Marsha Quallo-Wright, Deputy Director – Delivery, Engineering and Crypt-Key
  • Jonathon Ellison, Director for National Resilience and Future Technology
  • Ollie Whitehouse, Chief Technical Officer
Parent agencyGovernment Communications Headquarters
Websitewww.ncsc.gov.uk Edit this at Wikidata

The National Cyber Security Centre (NCSC) is an organisation of the United Kingdom Government that provides advice and support for the public and private sector in how to avoid computer security threats. It is the UK's National technical authority for cyber threats and Information Assurance. Based in Victoria, London, it became operational in October 2016, and its parent organisation is GCHQ.

History

The NCSC absorbed and replaced CESG (the information security arm of GCHQ), the Centre for Cyber Assessment (CCA), Computer Emergency Response Team UK (CERT UK) and the cyber-related responsibilities of the Centre for the Protection of National Infrastructure (CPNI). It built on earlier efforts of these organisations and the Cabinet Office to provide guidance on Information Assurance to the UK's wider private sector, such as the "10 Steps" guidance released in January 2015. In pre-launch announcements, the UK government stated that the NCSC would first work with the Bank of England to advise financial institutions on how to bolster online defences.

The centre was first announced in November 2015 by the Chancellor of the Exchequer, George Osborne. The existing Director General Cyber of GCHQ, Ciaran Martin, leads the new centre, and GCHQ's current Technical Director of Cyber Security, Dr Ian Levy, assumed the same role at the NCSC. A detailed paper on the creation of the NCSC, including a description of its structure and future challenges, written by the then Director of GCHQ, Robert Hannigan, who is widely credited with establishing the centre, was published by the Royal United Services Institute in February 2019.

The centre was dedicated by the Queen on 14 February 2017. Philip Hammond, the Chancellor of the Exchequer, announced an investment of £1.9 billion and an initiative to embed 100 people from industry into the NCSC on secondment.

In April 2016, the Ministry of Defence announced that a Cyber Security Operations Centre (CSOC) "to protect the MOD's cyberspace from malicious actors" with a budget of over £40 million will contribute to this initiative. It is located at MoD Corsham.

In October 2017, technical director Ian Levy was targeted by email prankster James Linton with a fake industry event; however, Levy correctly identified the unexpected headers and worked with him to put out a security blog about the incident.

On 1 October 2020 Lindy Cameron, formerly director-general of the Northern Ireland Office, took over from Ciaran Martin as CEO.

In December 2023, it was announced that Lindy Cameron would step down in early 2024.

In July 2024, the Centre in collaboration with international partners, revealed a North Korean state-sponsored cyber espionage campaign, aimed at stealing military and nuclear secrets. The advisory highlighted the actions of the Andariel group, linked to the DPRK’s Reconnaissance General Bureau's 3rd Bureau, targeting critical infrastructure globally to steal sensitive information and intellectual property. NCSC’s Director of Operations, Paul Chichester, emphasized the significance of protecting such data. Andariel's focus was primarily on sectors like defense, aerospace, nuclear, and engineering, with some attention to the medical and energy sectors. They also launched ransomware attacks against US healthcare organizations to fund further espionage. The advisory included technical details and mitigation strategies, urging network defenders to implement robust protections. The advisory was jointly issued by multiple agencies, including the NCSC, FBI, CISA, NSA, and Korean counterparts.

List of chief executives

  1. Ciaran Martin (3 October 2016 to 31 August 2020)
  2. Lindy Cameron (1 October 2020 to present; was Acting CEO (1 September 2020 to 30 September 2020))

See also

References

  1. ^ "Cyber security in the UK" (PDF). House of Commons. Committee of Public Accounts. 15 May 2019. Archived (PDF) from the original on 27 November 2020. Retrieved 1 August 2020.
  2. HM Government (1 November 2016). "National Cyber Security Strategy 2016-2021" (PDF). gov.uk. Archived (PDF) from the original on 1 November 2016. Retrieved 2 November 2016.
  3. "About us". National Cyber Security Centre. Archived from the original on 12 March 2017. Retrieved 9 March 2017.
  4. Corera, Gordon (18 March 2016). "Bank of England to work with new cybersecurity body". BBC News. Archived from the original on 31 December 2017. Retrieved 19 March 2016.
  5. Jones, Sam (18 March 2016). "UK launches National Cyber Security Centre". Financial Times. Archived from the original on 29 May 2016. Retrieved 19 March 2016.
  6. "Organising a Government for Cyber: The Creation of the UK's National Cyber Security Centre". RUSI. 27 February 2019. Archived from the original on 17 May 2019. Retrieved 17 March 2019.
  7. "National Cyber Security Centre: Queen opens new HQ as business warned it is unprepared for attacks". ITV News. 14 February 2017. Archived from the original on 19 September 2018. Retrieved 14 February 2017.
  8. "Cybersecurity: Queen opens centre to protect against attacks". BBC. 14 February 2017. Archived from the original on 20 June 2019. Retrieved 15 February 2017.
  9. "Director GCHQ speaks at the official opening of the National Cyber Security Centre | GCHQ Site". www.gchq.gov.uk. Archived from the original on 14 January 2018. Retrieved 17 March 2019.
  10. "Chancellor's speech at the National Cyber Security Centre opening". HM Treasury. 14 February 2017. Archived from the original on 10 March 2017. Retrieved 15 February 2017.
  11. "Britain to enter 'new era of online opportunity'". NCSC. 13 February 2017. Archived from the original on 5 October 2018. Retrieved 15 February 2017.
  12. "Defence Secretary announces £40m Cyber Security Operations Centre". Ministry of Defence. 1 April 2016. Archived from the original on 25 April 2019. Retrieved 2 April 2016.
  13. Hammick, Murray (30 October 2018). "The Budget and Defence". The Military Times. London. Archived from the original on 22 October 2019. Retrieved 7 May 2020.
  14. Levy, Ian (30 October 2017). "The serious side of pranking". Archived from the original on 6 April 2020. Retrieved 6 April 2020.
  15. Stokel-Walker, Chris (28 September 2017). "Revealed: The real identity of prankster king SINON_REBORN". Archived from the original on 6 April 2020. Retrieved 10 April 2020.
  16. Williams, Oscar (28 July 2020). "NIO's Lindy Cameron to succeed Ciaran Martin as NCSC CEO". New Statesman. Archived from the original on 29 July 2020. Retrieved 28 July 2020.
  17. Sheridan, Danielle (28 July 2020). "Ex-diplomat to be next cyber security CEO". The Daily Telegraph. Archived from the original on 29 July 2020. Retrieved 28 July 2020.
  18. "NCSC announces Lindy Cameron as new CEO". www.ncsc.gov.uk. Archived from the original on 24 June 2021. Retrieved 26 August 2020.
  19. "NCSC CEO Lindy Cameron to step down in 2024 | Computer Weekly". ComputerWeekly.com. Retrieved 6 January 2024.
  20. Allison, George (30 July 2024). "UK and allies expose North Korean cyber campaign". UK Defence Journal. Retrieved 1 August 2024.
  21. "National Cyber Security Centre appoints Lindy Cameron as new CEO". Fire Safety Matters. 5 August 2020. Archived from the original on 12 September 2021. Retrieved 12 September 2021.
  22. "National Cyber Security Centre appoints new CEO". Security World Market. Archived from the original on 12 September 2021. Retrieved 12 September 2021.

External links

Categories: