Ransomware attack

Ransomware is a type of malware which prevents you from accessing your device and the data stored on it, usually by encrypting your files. A criminal group will then demand a ransom in exchange for decryption.

How to recover from disruption, get ready for future incidents and make them less likely.

Practical guidance for leaders and cyber teams, covering early response, recovery to minimum viable operations, and rebuild.

Supporting organisations of all sizes to manage their communications strategy before, during and after a cyber security incident.

There are two levels of NCSC Assured Cyber Incident Response that can help organisations recover from an incident. NCSC Assured Service Providers operating at the technical standard required for CIR Enhanced Level will also be technically competent in providing the incident response services required by CIR Standard Level. If unsure of which level to select, see Information for buyers section.