Cyber incidents, data breaches and operational disruptions don’t just affect systems—they affect people.

The National Cyber Security Centre (NCSC) has published guidance titled “Putting staff welfare at the heart of incident response” to help organisations consider how a cyber incident may impact employees. While the guidance has been available for some time, the rising frequency of cyberattacks makes it increasingly relevant.

When an incident occurs—whether a cyberattack, system failure or security breach—employees may experience stress, uncertainty, fatigue, guilt or anxiety. The NCSC emphasises that if staff welfare is overlooked, it can weaken the overall resilience of the response. A team that is burnt out or demoralised is less able to think clearly, act decisively or recover effectively.

What the NCSC Recommends

The guidance highlights five key recommendations to ensure staff welfare is prioritised:

  • Include all staff in the incident response plan: When developing your response strategy, identify which staff will be affected and consider potential stresses. For example, what happens if key personnel are absent, or if staff are needed outside normal working hours? Planning in advance can reduce unnecessary pressure if an incident occurs.

  • Build a culture where staff feel safe to speak up: People respond to stressful situations differently. The guidance encourages creating a supportive environment where employees feel confident to ask for help if they feel overwhelmed, notice burnout in themselves, or observe concerning signs in colleagues. This approach helps prevent minor issues from escalating.

  • Plan your internal communications: During an incident, clarity is essential. Keep all employees—including those not directly involved—informed about developments and the steps being taken.

  • Be conscious of staff concerns: Employees may worry about the impact of the incident on their own livelihoods, for instance if personal information is compromised or jobs feel insecure. Clearly communicating how the organisation intends to manage the situation can help staff focus on their responsibilities rather than their anxieties.

  • Practise your response: Rehearsing your incident response can increase staff confidence. The NCSC offers a free Exercise in a Box resource to support these drills.

If your organisation already has an incident response plan—or is planning to develop one—it is worth reviewing it through a welfare lens using the NCSC’s guidance.

To review the guidance, see: https://www.ncsc.gov.uk/guidance/putting-staff-welfare-at-the-heart-of-incident-response