Cyber security in government
The Government Cyber Unit (GCU) is part of the Department for Digital, Culture, Media and Sport (DCMS). It is responsible for driving cyber security and resilience transformation across government and the public sector.
This page provides official guidance and support to help government organisations meet their cyber security responsibilities, strengthen resilience and stay ahead of evolving threats.
Understanding your responsibilities
Explore the latest standards, strategies and policies to understand your cyber security responsibilities and objectives.
Government Functional Standard GovS 007: Security
The planning, delivery and management of government security activities.
Government Cyber Action Plan (GCAP)
How government and public sector organisations will meet their cyber security and digital resilience objectives.
The Cyber Security Standard
The cyber security assurance process public sector organisations must follow.
Policy
The latest cyber-related policies and frameworks.
Meeting your responsibilities
Find out how to meet your cyber security responsibilities using the Secure by Design approach and by assessing your critical systems.
Managing your vulnerabilities
Find, manage and report vulnerabilities using government cyber services.
DNS Check
Find out how our free monitoring service feeds in to your DNS Check on MyNCSC.
Vulnerability Monitoring Service (VMS)
Sign up to get deeper domain checks and daily data sharing.
Disclosure for Government
Sign up to manage your disclosure and triage process inside a dedicated portal.
SIEM Integration
Find out how to receive vulnerability data to your SIEM tool.
Vulnerability Reporting Service (VRS)
Report vulnerabilities that you find in government IT systems through a public portal.
Vulnerability and Domain Knowledge Base
Find vulnerability and remediation guidance on how to fix .gov.uk domain issues.
Managing your cyber threats
Prevent, detect and respond to cyber threats using our guidance and services.
Threat and Vulnerability Alerts
Sign up to time-sensitive notifications for security operations teams in government organisations.
Threat and Vulnerability Reporting
Find out how to sign up to insights into real-world cyber threats and vulnerabilities.
Source a Threat Assessment
Find out how to source a threat assessment and the steps to take.
Perform Threat Modelling
Following on from a threat assessment, view guidance on threat modelling.
Reporting and responding to cyber incidents
How to report or respond to a cyber incident in government.
Government Cyber Incident Response Plan (G-CIRP)
Learn about your responsibilities when responding to cyber security incidents.
Government Cyber Incident Exercising
The policy to support you with cyber incident exercising.
Report a cyber incident
How to tell GC3's Incident Coordination and Response team about a cyber incident.
Developing your cyber skills
Understand the roles and responsibilities required for government cyber security professionals and develop your skills.
Getting cyber security support
Access expert services and events to help meet your cyber security obligations.
