News //

NormCyber becomes Assured Service Provider of the NCSC Cyber Incident Exercising (CIE) Scheme


Demonstrates Norm’s ability to deliver tailored table-top and live-play cyber incident exercises in line with the highest industry standards

image with the words - From Readiness to Resilience NormCyber Achieves NCSC CIE Assurance. and the NCSC badge

NormCyber, the award-winning security operations specialist, today announced it has been awarded Assured Service Provider status under the National Cyber Security Centre’s (NCSC) Cyber Incident Exercising (CIE) scheme. The achievement underscores Norm’s commitment to upholding the highest technical standards for cyber incident exercising, with the goal of enabling customers to proactively bolster their cyber resilience.

In partnership with CREST and IASME, the CIE scheme provides organisations with access to trusted cyber security providers that can test their cyber incident readiness and help them refine their response plans and processes. It includes two types of exercises:

  1. Table-Top: Discussion-based sessions bringing together relevant teams to discuss their roles and responsibilities, expected activities and key decision points in accordance with an incident response plan in a cyber incident scenario.
  2. Live-Play: Active, real-time decision-making sessions where team members execute their regular roles and responsibilities in response to controlled injects that represent a realistic cyber incident scenario.

Norm announced its Incident Readiness Assessment service one year ago to give organisations much-needed clarity and confidence in managing cyber incidents. The consultative service enables organisations to rehearse and fortify their response strategies under the guidance of Norm’s CREST-accredited and NCSC Level 2 certified Cyber Incident Response Team.

“We are pleased to achieve Assured Service Provider status and strengthen our tried-and-tested incident readiness offering with such valuable industry recognition,” said Paul Cragg, Chief Technical Officer at NormCyber. “We are committed to helping organisations get ahead of evolving cyber threats by providing the highest-quality tailored cyber risk management services on the market.”

“We know that preparing for cyber attacks is a continuously evolving skillset,” said Peter McAndrew, LiveOps Manager at Art Fund, Britain’s largest art charity. “We felt comfortable extending our scope with Norm to benefit from live-play exercises that simulate real cyber attacks. These give us firsthand experience in a controlled environment and ensure that we have the confidence and capabilities to respond rapidly and effectively if the worst was to happen.”

“Over the years, Norm has played an instrumental role in helping us improve our cyber resilience, so taking on the Incident Readiness Assessment was a logical next step for us,” said Richard Baker, Group IT Director at Flamingo Group International. “The cyber incident exercise felt tailor-made for us and offered a wholly unique experience, drawing on Norm’s intricate understanding of the lifecycle of cyber attacks. It proved to be an effective test of our senior leadership’s preparedness, and we are now making proactive enhancements to our cyber security procedures off the back of Norm’s recommendations.”

Besides offering a comprehensive Incident Response managed service, Norm also plays an active role in raising awareness of the importance of cyber incident readiness in the wider community. It regularly holds events around the country to give organisations the chance to test their preparedness through Cyber Recovery Wargames and Cyber Escape Room Challenges.