The National Cyber Security Centre (NCSC) has published new guidance in which it urges UK organisations to prepare for an extended period of heightened cyber security threat.

The guidance is designed to apply to any period of sustained heightened cyber threat, including the one arising from Russia in light of events in and around Ukraine.

While the NCSC is not aware of any current specific threats to UK organisations, it says that the cyber threat to the UK remains heightened and they expect it to stay that way for some time.

The new guidance aims to help organisations avoid complacency and staff burnout. It advises that increased workloads for cyber security staff over an extended period can harm wellbeing and lead to lower productivity, with a potential rise in unsafe behaviours or errors.

The recommended actions in the guidance include:

  • Following the NCSC’s actions to take when the cyber threat is heightened guidance.
  • Revisiting risk-based decisions taken during the initial phase of heightened threat.
  • Empowering cyber staff to make day-to-day decisions about the threat response without requiring additional oversight.
  • Ensuring workloads are spread evenly across individuals and teams.
  • Ensuring frontline cyber staff can take breaks to recharge.
  • Accelerating planned action to harden networks and boost defence capabilities.

See: Maintaining a sustainable strengthened cyber security posture – NCSC.GOV.UK