Cyber Security Baseline Standards

The National Cyber Security Strategy 2019-2024 contained a commitment for the publication of a Cyber Security Baseline Standard for government ICT services. The process for drawing up the standards was managed by a Steering Group with representation from stakeholders in government departments and agencies.

The National Cyber Security Centre (NCSC), in conjunction with the Office of the Government Chief Information Officer (OGCIO), have now developed the Standards which are intended to create an acceptable security standard and form a broad framework for a set of measures which can be revised over time.

The Standards model follows a holistic and comprehensive approach to the issues related to Cyber Security which combines the best of various standards to address the needs of key stakeholders.

There is no single solution or fix when it comes to cybersecurity and protecting a Public Service Body. For instance, "Zero-day" attacks exploiting previously unknown software vulnerabilities are especially problematic.

However, using the Cyber Security Baseline Standard Framework to assess and improve the management of cybersecurity risks should put Public Service Bodies in a much better position to identify, protect, detect, respond to, and recover from an attack, minimising damage and impact.