Responding to a cyber incident - new guide for CEOs

News article

New CEO guidance for effective incident response

The National Cyber Security Centre (NCSC) has published new guidance to help CEOs in public and private sector organisations manage a cyber incident.

This guidance takes you through the various steps the NCSC recommends you take in the aftermath of a cyber incident. This includes:

  • putting in place proportionate and effective governance
  • bringing in resources for advice and support
  • considering the impact of a data breach (including any reporting duties)
  • communicating clearly and effectively
  • considering team resilience and welfare
  • reviewing the lessons learned
  • reporting serious incidents to the relevant agencies

The guidance acknowledges that the immediate aftermath of a significant cyber attack is often challenging and CEOs have difficult risk-based decisions to make to protect their operations.

This guidance should help you limit the impact of cyber incidents on your business, clients and staff in the weeks and months that follow.

Read the full NCSC guidance for CEOs on responding to a cyber incident.

First published 9 April 2024