ABSTRACT

This chapter considers the extent to which issues of cyber security and cyber terrorism have been considered in existing policy guidance in the UK and abroad. It examines the 2009 Cyber Security Strategy and the 2010 Home Office Cyber Crime Strategy. 'Response and analysis' was the responsibility of three bodies. First, for the public sector it was provided by the UK's Government Computer Emergency Response Team (Gov Cert UK) and second, for the Ministry of Defence (MoD) by the MoD Computer Emergency Response Teams. Thirdly, the Combined Security Incident Response Team (CSIRTUK) provided response and analysis for critical infrastructure providers. Under the heading of 'advice and guidance' Downing identified two bodies; the Centre for Protection of National Infrastructure (CPNI) and the National Technical Authority for Information Assurance, both providing advice to government departments and critical infrastructure providers on cyber attack.