View source for Cybersecurity policy, policing and intelligence bodies in the UK

{{short description|'''Overview of UK government bodies responsible for cybersecurity policy, policing, and intelligence'''}}
{{Infobox government agency
| name = Cybersecurity bodies of the United Kingdom
| type = Government agencies and units
| formed = Various (2000s–present)
| jurisdiction = {{flag|United Kingdom}}
| headquarters = London and other locations
| website = {{URL|https://www.ncsc.gov.uk/|NCSC}}
}}

The '''cybersecurity policy, policing and intelligence bodies in the UK''' form a coordinated network of government agencies, intelligence units, law enforcement teams, and cross-departmental initiatives focused on defending against cyber threats.

The [[National Cyber Security Centre (NCSC)]] serves as the primary technical authority for cyber security.<ref name="ncscgov">[https://www.ncsc.gov.uk/ National Cyber Security Centre website] ''NCSC'', accessed June 2026.</ref> It operates as part of [[GCHQ]].

The [[National Cyber Force (NCF)]] handles offensive cyber operations as a joint defence and intelligence partnership.<ref name="ncfgov">[https://www.gov.uk/government/organisations/national-cyber-force/about National Cyber Force] ''GOV.UK'', accessed June 2026.</ref>

== Active operational units ==
Key entities include the [[National Protective Security Authority (NPSA)]], successor to the [[Centre for the Protection of National Infrastructure (CPNI)]], operating as part of [[MI5]].<ref name="npsagov">[https://www.npsa.gov.uk/ National Protective Security Authority] ''NPSA'', accessed June 2026.</ref>

=== Defence and law enforcement ===
* [[Defence Digital]]
* [[Cyber Defence Operations Centre]] (CDOC)
* [[National Cyber Crime Unit]] (NCCU) of the [[National Crime Agency]]

== Historical units ==
Legacy bodies merged into current structures, such as [[CESG]] and [[CERT-UK]] into the [[NCSC]].

== Governance and strategies ==
High-level oversight is provided by the [[National Security Council (NSC) Cyber Subcommittee]].
{| class="wikitable"
! Entity !! Dates !! Purpose !! Intel-related? !! Predecessor/Successor !! Notes
|-
| [[National Cyber Security Centre]] (NCSC) || 2016–present || UK's technical authority on cyber threats/incidents/advice <ref name="ncsc">[https://www.ncsc.gov.uk/ NCSC Official]</ref> || Yes (GCHQ) || Merged [[CESG]], [[CERT-UK]], CCA, CPNI cyber || Part of core intel community
|-
| [[National Cyber Force]] (NCF) || 2020–present || Joint offensive cyber ops vs threats <ref name="ncf">[https://www.gov.uk/government/organisations/national-cyber-force/about NCF Gov]</ref> || Yes (GCHQ/MI6/MOD) || Successor [[NOCP]] || Samlesbury base
|-
| [[National Protective Security Authority]] (NPSA) || 2023–present || Physical/personnel/holistic state-threat security <ref name="npsa">[https://www.npsa.gov.uk/ NPSA Official]</ref> || Yes (MI5) || Successor [[CPNI]] (2007–2023) || Broader CNI remit
|-
| [[Government Cyber Coordination Centre]] (GC3) || 2022–present || Gov-wide threat coordination/incident response - collaborative initiative between the [[Department for Science, Innovation and Technology]] (DSIT), the [[National Cyber Security Centre]] (NCSC), and departmental cyber security teams across central government.<ref>https://www.security.gov.uk/services-resources/government-cyber-coordination-centre/</ref> || Yes, [[NCSC]] involved. || Under Gov Cyber Strategy || Visibility/sharing
|-
| [[Government Security Group]] (GSG) / Gov Cyber Unit || Active || Overarching gov security standards ([[GovAssure]]) || No || Cabinet Office || Enforcement
|-
| [[Central Digital and Data Office]] (CDDO) & [[GDS]] || Active || Secure digital baselines || No || [[DSIT]] || Infrastructure
|-
| [[Defence Digital]] (ex-ISS) || Active || Military network backbone || Partial (MOD) || Corsham || Perimeter defence
|-
| [[Cyber Defence Operations Centre]] (CDOC) || Active || MOD network threat mitigation || Partial (MOD) || - || Defensive ops
|-
| [[Joint Cyber Unit]] || 2013-present || || MoD/GCHQ || ||
|-
| [[Joint Cyber Reserve Force]] || 2013–present || Crisis support reservists || Partial (MOD) || - || Strategic Command
|-
| [[Land Intelligence Assurance Group]] (LIAG) || Active || Tactical cyber assurance || Partial (Army) || Under Defence Digital || Worldwide
|-
| [[National Cyber Crime Unit]] (NCCU) || 2013–present || Cyber crime investigation/prosecution || No (NCA collab) || - || Ransomware focus
|-
| [[CESG]] || Historical || GCHQ info assurance || Yes (GCHQ) || Predecessor [[NCSC]] || Closed 2016
|-
| [[Office of Cyber Security and Information Assurance]] (OCSIA) / CGSD || Historical || 2009–2017 || Policy/funding, based in [[NSS]] and included Fusion Unit with intel input [[MI5]], [[GCHQ]] || To NCSC || Cabinet Office
|-
| [[Cyber Security Operations Centre]] (CSOC) || 2009–2016 || Network monitoring || Yes (GCHQ) || Pre-NCSC || Testbed
|-
| [[CERT-UK]] || 2014–2016 || National incident coordination || Partial || To NCSC || Dissolved
|-
| [[GovCERTUK]] || Closed 2014 || Gov network response || Partial || Early CERT || Predecessors
|-
| [[Centre for the Protection of National Infrastructure]] (CPNI) || 2007–2023 || CNI physical/cyber guidance || Partial (MI5) || NISCC/NSAC → NPSA || Evolved
|-
| [[National Offensive Cyber Programme]] (NOCP) || Historical || Offensive coordination || Yes || To NCF || Precursor
|-
| [[GovAssure Framework]] || 2023–present || Resilience assurance (CAF) || Policy || Cabinet Office || Mandatory
|-
| [[Defence Cyber Protection Partnership]] (DCPP) || Active || Supply chain security || Partial || MOD/DSIT || Industry links
|-
| [[Defence Cyber Academy]] (DCA) || Active || Training hub || Partial (MOD) || Shrivenham || Skills
|}

*Key Policies/Strategies: 
**[[Cyber Security Strategy of the United Kingdom (2009)]]
**[[UK Cyber Security Strategy (2011–2016)]]
**[[National Cyber Security Strategy (2016–2021)]]
**[[National Cyber Strategy (2022–Present)]]
(underpins GC3, GovAssure). [[National Cyber Security Programme]].

*Committees: [[NSC Cyber Subcommittee]] (2010–), [[JCNSS]], [[PAC]] cyber oversight.

All claims drawn from official/gov sources; [[NCSC]], [[NCF]], [[NPSA]] form core of modern intel-linked cyber posture.

==Notes==


[[Category:Government of the United Kingdom]]
[[Category:Cybersecurity]]
[[Category:Intelligence agencies of the United Kingdom]]
[[Category:National security of the United Kingdom]]