UK cyber security community
The cyber security (or information assurance) community in the United Kingdom is diverse, with many stakeholders groups contributing to support the UK Cyber Security Strategy. The following is a list of some of these stakeholders.
- 1 Government
- 1.1 Cyber Aware
- 1.2 Department for Digital, Culture, Media and Sport
- 1.3 Get Safe Online
- 1.4 National Crime Agency (NCA)
- 1.5 National Cyber Security Centre
- 1.6 National Security Council
- 1.7 Office of Cyber Security and Information Assurance
- 1.8 Trustworthy Software Initiative
- 1.9 Warning, Advice and Reporting Points (WARPs)
- 2 Professional bodies and industry groups
- 2.1 UK Cyber Security Forum
- 2.2 ADS
- 2.3 Business Continuity Institute (BCI)
- 2.4 Council of Registered Ethical Security Testers (CREST)
- 2.5 Crypto Developers Forum
- 2.6 Information Assurance Advisory Council (IAAC)
- 2.7 Information Assurance Collaboration Group (IACG)
- 2.8 Information Systems Security Association (ISSA)
- 2.9 Institute of Information Security Professionals (IISP)
- 2.10 ISACA
- 2.11 (ISC)²
- 2.12 NDI UK
- 2.13 TechUK
- 2.14 Tigerscheme
- 2.15 UK Council for Electronic Business
- 2.16 British Computer Society (BCS)
- 2.17 Cyber Scheme
- 3 Academic
- 4 See also
- 5 References
According to a parliamentary committee the UK government is not doing enough to protect the nation against cyber attack.
Cyber Aware is a cross-government awareness and behaviour campaign which provides advice on the simple measures individuals can take to protect themselves from cyber crime.
Department for Digital, Culture, Media and SportEdit
The Department for Digital, Culture, Media and Sport is one of the lead government departments on cyber security policy, responsible for supporting & promoting the UK cyber security sector, promoting cyber security research and innovation, and working with the National Cyber Security Centre to help ensure all UK organisations are secure online and resilient to cyber threats.
Get Safe OnlineEdit
National Crime Agency (NCA)Edit
National Cyber Security CentreEdit
The National Cyber Security Centre is the UK’s authority on cyber security; its parent organisation is GCHQ. It absorbed and replaced CESG (the information security arm of GCHQ) as well as the Centre for Cyber Assessment (CCA), Computer Emergency Response Team UK (CERT UK) and the cyber-related responsibilities of the Centre for the Protection of National Infrastructure (CPNI). NCSC provides advice and support for the public and private sector in how to avoid cyber threats.
CESG (originally Communications-Electronics Security Group) was a branch of GCHQ which worked to secure the communications and information systems of the government and critical parts of UK national infrastructure. The Centre for the Protection of National Infrastructure (CPNI) provided protective security advice to businesses and organisations across the national infrastructure.
National Security CouncilEdit
Office of Cyber Security and Information AssuranceEdit
The Office of Cyber Security and Information Assurance (OCSIA) supports the Minister for the Cabinet Office, the Rt Hon Francis Maude MP and the National Security Council in determining priorities in relation to securing cyberspace. The unit provides strategic direction and coordinates action relating to enhancing cyber security and information assurance in the UK. The OCSIA is headed by James Quinault.
Trustworthy Software InitiativeEdit
The Trustworthy Software Initiative (TSI) is a UK public good activity, sponsored by the UK government's Centre for the Protection of National Infrastructure, aimed at 'making software better'.
Warning, Advice and Reporting Points (WARPs)Edit
Professional bodies and industry groupsEdit
UK Cyber Security ForumEdit
The UK Cyber Security Forum is a social enterprise representing cyber SME's (Small and Medium Enterprise) in the UK. The forum is composed of 20 regional cyber clusters around the UK. Each cluster is run as a subsidiary of the UK Cyber Security Forum and all are operated by groups of volunteers. They provide events around the UK to engage the public in cyber security and to provide continued professional development to cyber professionals. The official clusters are:
|UK Cyber Clusters|
|Bristol and Bath Cyber|
|Bournemouth Cyber Cluster|
|Norfolk Cyber Cluster|
|North East Cyber Cluster|
|North West Cluster|
|N Somerset Cluster|
|Scottish Cyber Cluster|
|Solent Cyber Cluster|
|South West Cyber Cluster (Exeter)|
|Thames Valley Cluster|
|West Midlands Cluster|
Business Continuity Institute (BCI)Edit
The Business Continuity Institute (BCI) was established in 1994 to enable individual members to obtain guidance and support from fellow business continuity practitioners.
Council of Registered Ethical Security Testers (CREST)Edit
Not for profit accreditation and certification organisation. 
Crypto Developers ForumEdit
The CDF promotes the global interests of the UK crypto development industry.
Information Assurance Advisory Council (IAAC)Edit
The Information Assurance Advisory Council (IAAC) works across industry, government and academia towards ensuring the UK’s information society has a robust, resilient and secure foundation. The IAAC was set up by Baroness Neville-Jones who chaired the organisation until 2007, handing over to the current chairman Sir Edmund Burton. Affiliates include BT Group, Northrop Grumman, QinetiQ, Raytheon, PwC, O2 UK, Ultra Electronics and GlaxoSmithKline. The 2012/13 work programme focused on consumerisation and its effects on information assurance.
Information Assurance Collaboration Group (IACG)Edit
The IACG was formed following the UK's national IA conference in 2006. The IACG encourages greater collaboration between the commercial supply base for information assurance products and services operating within the UK public sector. Stakeholders include CESG, BIS, the Office of Cyber Security and Information Assurance (OCSIA), Cyber Security Operations Centre (CSOC), and the CPNI. The group maintains the UK information assurance community map, hosted on the CESG's web site. It has two co-chairs: Colin Robbins of Nexor and Ross Parsell of Thales. The IACG ceased operation in 2014.
Information Systems Security Association (ISSA)Edit
Institute of Information Security Professionals (IISP)Edit
The Institute of Information Security Professionals (IISP) is an independent, non-profit body governed by its members, with the principal objective of advancing the professionalism of information security practitioners and thereby the professionalism of the industry as a whole.
ISACA is an international professional association that deals with IT governance. Previously known as the Information Systems Audit and Control Association.
(ISC)² is the International Information Systems Security Certification Consortium is a non-profit organization which specializes in information security education and certifications.
TechUK, formerly known as Intellect, is a UK trade association for the technology industry. It has a Cyber Security Group focused on “high threat” areas – including defence, national security and resilience, protection of critical national infrastructure, intelligence, and organised crime, chaired by Dr Andrew Rogoyski of Roke Manor Research. The Security and Resilience Group works to build relationships between the technology industry and policymakers, customers and end users, and is chaired by Stephen Kingan of Nexor.
Tigerscheme is a commercial certification scheme for technical security specialists, backed by university standards and covering a wide range of expertise.
Tigerscheme is CESG certified in the UK and candidates are subject to an independent rigorous academic assessment authority. Tigerscheme was founded in 2007 on the principle that a commercial certification scheme run on independent lines would give buyers of security testing services confidence that they were hiring a recognised and reputable company. In June 2014 the operational authority for Tigerscheme was transferred to USW Commercial Services Ltd.
UK Council for Electronic BusinessEdit
UKCeB is a not-for-profit, membership organisation whose mission is to transform secure information sharing for through life collaboration in defence acquisition and support.
British Computer Society (BCS)Edit
The British Computer Society (BCS) is a professional body and a learned society that represents those working in information technology both in the United Kingdom and internationally. It has a security, data and privacy group.
The Cyber Scheme is a not for profit professional examination body under contract to the National Cyber Security Centre to provide technical exams in support of the Governments assured Penetration testing company scheme CHECK. The exams are independent and rigorous and are conducted for Practitioner Team member level and Team leader levels.
Academic Centres of Excellence in Cyber Security ResearchEdit
GCHQ has accredited several Academic Centres of Excellence in Cyber Security Research:
- University of Bristol
- Imperial College London
- Lancaster University
- University of Oxford
- Queen's University Belfast
- Royal Holloway
- University of Southampton
- University College London
- University of Cambridge
- University of Birmingham
- University of Newcastle upon Tyne
- University of Surrey
- University of Kent
These accreditations expire in July 2017; results of the re-accreditation process are expected in mid February 2017.
University of South Wales Information Security Research GroupEdit
In particular the group is focusing upon:
- Network security
- Intrusion detection and wireless security
- Penetration testing and vulnerability assessment
- Computer forensics and digital evidence visualisation
- Threat assessment and risk management
De Montfort University Cyber Security CentreEdit
The Cyber Security Centre (CSC) at De Montfort University is a multidisciplinary group of academics who focus on a wide variety of cyber security and digital forensics issues. The Centre's mission is to provide the full benefits to all of a safe, secure and resilient cyberspace.
- "UK Cyber Security Strategy".
- UK 'wholly' unprepared to stop devastating cyber-attack, MPs warn The Guardian
- "About us". National Cyber Security Centre. Retrieved 9 March 2017.
- HM Government (1 November 2016). "National Cyber Security Strategy 2016-2021" (PDF). gov.uk. Retrieved 2 November 2016.
- UK Trustworthy Software Initiative, retrieved 4 January 2014
- Protecting and promoting the UK in a digital world: 2 years on – Government Press Release, retrieved 12 December 2013
- "IAAC - Neville-Jones".
- "IAAC Sponsors".
- "Establishment of the IACG". National Archives. Archived from the original on 2008-03-05.
- "IACG Overview".
- "IA Community Map" (PDF).
- "ISSA UK".
- "NDI UK".
- "Intellect Cyber Security".
- "Intellect Defence & Security".
- "UK CeB".
- "BCS Security".
- "Academic Centers of Excellence". CESG.
- "DeMontFort Cyber Security Centre".