The National Cyber Security Centre (NCSC) has released guidance for its upcoming assured Cyber Adversary Simulation (CyAS) scheme. This initiative aims to standardize and improve the quality of cyber adversary simulation services available to organizations, according to IT Pro.
Cyber adversary simulation, also known as red teaming, involves mimicking real-world attack actions to test an organization's defenses, focusing on detection and response rather than just vulnerability identification.
The NCSC's new CyAS scheme will approve commercial organizations to offer these services, addressing the current variability in market quality. The scheme, launching in November, will provide a transparent benchmark for buyers, ensuring greater confidence in NCSC-assured providers.
It supports two approaches: a full-spectrum simulation starting from outside the network, and an assumed breach simulation beginning within the network. The NCSC recommends the assumed breach approach for organizations with mature security postures, particularly larger firms or those in critical national infrastructure and UK government sectors. These organizations should already have robust risk assessments, established mitigations, and strong detection systems in place to benefit fully from the scheme.
Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.
Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.
An error occurred trying to play the stream. Please reload the page and try again.
CloseRegistering with SC Media is 100% free. Join tens of thousands of cybersecurity leaders today and gain access to the latest analysis shaping the global infosec agenda.
