Information Assurance

The Information Assurance team has the following responsibilities:

• Advice to information asset owners and other stakeholders regarding risk management of NCA data
• Provide security advisory for changes to new and existing business and DDaT services
• Deliver and manage cyber assurance documents and processes
• Writing of Authorities to Operate; Risk Acceptance Agreements and Stakeholder Briefs
• Review and advise on Security Operating and Standard Operating Procedures

Security Analysis and Threat Intelligence Team

The Security Analysis and Threat Intelligence Team has the following responsibilities:

• Provide an Integrated Security Operations Centre, delivering 24/7 monitoring for all pillars of security
• Identify and investigate suspicious activity, anomalies and security events
• Assessment of security threats for escalation to specialist incident response teams

Defend & Respond

The Defend and Respond Team has the following responsibilities:

• Investigation and management of cyber security incidents and events
• Scope and manage IT Health Checks (ITHCs) and formulate remedial action plans
• Critically review all IT Requests for Change (RFC)
• Management of the Cryptographic account with the HMG technical authority