NCSC Cyber Incident Response Level 2
Cyber Incident Response providers help organisations that have been a victim of a cyber attack. Cyber Incident Response (CIR) Level 2 is an industry assurance scheme created by The National Cyber Security Centre (NCSC). IASME is one of two delivery partners that assure the CIR providers on behalf of the NCSC.
Cyber Incident Response Level 2 Providers, assured against the NCSC’s standard, have been assessed as being capable of responding to the types of cyber attack likely to be faced by the majority of UK organisations and are considered capable of providing high quality cyber incident response to organisations of all sizes.
The NCSC recommends that all UK organisations use a CIR Assured Service Provider when dealing with cyber incidents.
A CIR Assured Service Provider will:
- determine the extent and severity of the incident
- manage its immediate impact
- provide advice and assistance to fix the compromise of that system
- work to increase security across the network with recommendations of further remedial actions
- deliver a report
How to find an Assured Service Provider for Cyber Incident Response Level 2
View the list of all Assured Service Providers on the NCSC’s website.
It is a good idea to start working with a CIR provider before you experience a cyber incident. That way, you can make sure that you have a plan in place and know what to do, in what can be, a very stressful situation.
How to join the Cyber Incident Response Level 2 scheme as a provider
If your company offers Cyber Incident Response services within the UK and incident response staff are located physically within the UK, you can apply to become a Cyber Incident Response Level 2 Assured Service Provider. You will need to submit information to demonstrate your organisation’s compliance with the NCSC’s CIR Level 2 Technical Standard.
There is an onboarding cost of £1,100 + VAT plus an annual license fee of £1,100 + VAT.
Further details about the process, including ongoing costs and timeframes, can be found in the Frequently Asked Questions page.
When you are ready to start the process, please contact our customer services team [email protected]. If you have any questions, please do give us a call on 0330 088 2752.