Cross sector liaison programme to ensure Local Authorities ... resilience together... · key national strategic partners and increased the understanding of the importance of cyber

COVER National Cyber Security Programme-Local

[email protected]

National Cyber Security Programme Local 2018-2020

• Cross sector liaison programme to ensure

Local Authorities and Local Resilience Forums

can access NCSP developed services.

• Transform current UK resilience doctrine,

training and standards.

NCSP Civic Cyber Resilience : Building Resilience Together 2018/2020

Think Cyber Think Resilience

• NCSP funded Think Cyber Think Resilience initiative has

raised awareness about the strategy, explained the role of

key national strategic partners and increased the

understanding of the importance of cyber resilience across

localities and Local Resilience Fora.

• As of March 2018 it has inducted over 2000 senior local

leaders, policy makers and practitioners providing them with

guidance on how to deliver a cyber-aware culture within their

organisations and wider civil contingencies community.


http://istanduk.org/cyber-resilience/

Think Cyber Think Resilience continued

• Establishment of a Civic Cyber Resilience Model

developed by the Think Cyber Think Resilience initiative

in conjunction with the wider National Cyber Security

Programme through a series of workshops with local

public sector leaders, policymakers, practitioners and in

association with St George’s House Windsor.

• The initiative has been awarded international exemplar

status by the OECD Observatory of Public Sector

Innovation for its innovative approach to shared learning

in support of civic cyber resilience.



Championing Collaborative Governance

Championing the establishment of cross-sectorial

collaborative governance to help co-design and

co-produce NCSP outcomes to support localities

• Local Government Cyber Security Stakeholder

Group,

• NCSC Local Technical Reference Group

• NCSP Public Sector Working Group to look at

options for leveraging NCSP wider offerings in

support of local public services and the

resilience community.

• Supporting the development new MHCLG

Resilience and Emergencies Directorate

Cyber Adviser Team

NCSP Civic Cyber Resilience : Building Resilience Together 2018/2020 20

National Cyber Security Programme – Autumn Showcases 2018 Think Cyber Think Resilience Seminars

Manchester: Thursday 22nd

November : King’s House Centre, Sidney Street, Manchester M1 7NB

Bristol: Tuesday 4th

December: We the Curious, Anchor Road, Harbourside, Bristol BS1 5DB

Birmingham: Wednesday 12th

December : De Vere Colmore Gate, Colmore Row, Birmingham B3 2QD


Building Resilience Together 2018/2020

MHCLG/Cabinet Office Civil Contingencies Secretariat are working

together to building up of cyber security and resilience situational awareness,

strategic collaboration and operational capabilities across the local

authorities and wider resilience community as follows:

• The creation of a UK Resilience Cyber Incident Preparedness

Standard

• The development of a Cyber Hub Resilience Direct Learning and

Development platform

• Establishment of a “Think Cyber Think Resilience” Cyber

Pathfinder Training Scheme and Multi-agency Combined Cyber

Exercise offer in association with the Emergency Planning College.



The new LRF focussed standard is being developed in association with the National

Cyber Security Centre

Cyber Incident Preparedness Standard : Desired Outcome

“All LRF members and supporting organisations have collectively

understood and validated multi-agency plans and arrangements, which are

informed by current cyber threat intelligence and the local resilience context,

for responding to a widespread cyber incident.”

UK Resilience Cyber Incident Preparedness Standard

Resilience Direct Cyber Hub Platform


The establishment of a Cyber Hub related Resilience Direct

Learning and Development platform provide online access to the:-

• UK Resilience Cyber Incident Preparedness Standard

guidance and documentation

• Think Cyber Think Resilience Cyber Pathfinder learning

materials and cyber exercising formats

• And support the creation of Cyber Communities of Practice

facilities and tools

Aim: To provide the resilience community with knowledge, guidance and bespoke tools to assist with planning for,

responding to and recovering from cyber threats/attacks


Cyber Pathfinders:

Leadership

Governance

Partnerships

Technology

Training

Integrating Cyber

Resilience into wider

Incident Management

Capability

Developing Cyber

Resilience Capability


Aim: To establish a shared understanding of the how to develop and sustain a continuous

improvement approach to civic cyber resilience across local organisations and their partners.

The curriculum is being delivered in association with the Cabinet Office - Emergency Planning

College and will roll-out across eight regional locations from January 2019 to March 2020. It will

be structured around the following three key themes and supporting “Pathfinder” modules :-

Cyber Pathfinder Training Scheme

Developing Underpinning

Cyber Resilience

Knowledge


Theme 1 : Developing Underpinning Cyber Resilience

Knowledge

Covering a series of “Pathfinder modules” that will provide

participants with a deeper understanding and new insights of the

following issues :

• Cyber Landscape: overview of a baseline common

understanding of the current cyber landscape.

• Guidance and Support: signpost to authoritative sources of

guidance and support.

• Cyber Threat: provide a detailed understanding of the cyber

threat trajectory.

• Capability: outline the core components of a cyber

resilience capability.


Developing Underpinning

Cyber Resilience

Knowledge


Theme 2 : Developing Cyber Resilience Capability



following issues :

• People, Processes & Technology (day-to-day): outline the

core components to develop a cyber resilience programme.

• Resilience, Preparedness & planning: integrate existing

resilience arrangements with cyber resilience issues.

• Embedding Cyber Resilience: raise cyber resilience

awareness and education within their organisations


Developing Cyber

Resilience Capability


Theme 3 : Integrating Cyber Resilience into wider Incident

Management Capability



following issues :

• Incident Management: To develop a clear understand of

the requirement for an effective incident management

capability.

• Crisis Management & Communications: To embed the

take-up of crisis management requirements during a cyber

incident.

• Business Continuity: Establish an appreciation of how

business continuity complements cyber resilience.

• Recovery: Outline the requirements for effect recovery

planning


Integrating Cyber

Resilience into wider

Incident Management

Capability


Aim: To build a shared understanding of the implications for local

multi-agency partners in responding to a significant cyber incident.

The 8 regionally based Pathfinder Combined Cyber Exercise will undertake

the following:-

• Rehearse and examine the implications and impacts of a significant cyber

incident on multi agency partnerships (LRFs) during a major incident;

• Consider multi-agency response arrangements in managing the impact of

a significant cyber incident and highlight areas of vulnerability;

• Enable organisations and LRFs to reflect on their current response and

recovery capabilities in managing a significant cyber incident;

• Identify common steps for individual organisations and the wider multi-

agency (LRF) community in responding to a major incident of this nature.


Multi-Agency Combined Cyber Exercises

Multi-Agency Combined

Cyber Exercises

To register for our event booking

system and online calendar please

mail cyber-

[email protected]


Cyber Pathfinders:

Leadership

Governance

Partnerships

Technology

Training

system and online calendar please

[email protected]

mailto:[email protected]


To find out more

• Showcases and Pathfinders: To register for our event booking system

and online calendar please mail [email protected]

• On Resilience Direct see : https://www.gov.uk/guidance/resilient-

communications#resiliencedirect and to register for access to

Resilience Direct contact: [email protected]

• To contact the MHCLG RED Cyber Adviser Team pleases email -

[email protected]



https://www.gov.uk/guidance/resilient-communications#resiliencedirect



COVER National Cyber Security Programme-Local

[email protected]

Documents

Cross sector liaison programme to ensure Local Authorities ... resilience together... · key national strategic partners and increased the understanding of the importance of cyber