ACD 2.0: The UK updates its cybersecurity system

Carding Forum

Professional
Messages
2,788
Reaction score
1,176
Points
113
The National Center is launching a new protection program for businesses and the public sector.

The UK's National Cyber Security Center (NCSC) has announced the launch of a new version of its Active Cyber Defense (ACD) program to support businesses in the fight against new cyber threats.

The program, called ACD 2.0, will include advanced cybersecurity tools and services designed to address gaps in the commercial market. The NCSC intends to review the current ACD tools and services, as well as transfer their management to the private sector, if necessary. Most of the new successful services are expected to be transferred to another part of the government or private sector within three years for permanent management.

The development of ACD 2.0 is related to the changing landscape of cyber threats, such as new forms of phishing attacks, and the need to take into account current offers in the commercial cybersecurity market. The program aims to achieve the overall goal of the ACD — "to protect the majority of people in the UK from most malicious cyber attacks most of the time".

Initially, the ACD program was launched in 2017 and included four areas of free services for UK government departments aimed at improving the level of cybersecurity. These areas include:
  • Independent checks, including early warning.
  • Threat detection, such as domain name filtering (DNS) and vulnerability detection.
  • Security and defense, including the Suspicious Email Reporting Service (SERS) and security features.
  • Providing a common platform that supports various ACD services.

The ACD program has proven successful in combating phishing attacks and has been extended to all sectors across the UK. The NCSC's sixth annual report on ACD, published in July 2023, highlighted the growing popularity and success of the program. In particular, a record number of reports of potentially malicious emails were registered — 7.1 million, and the use of the Mail Check service, designed to improve compliance with message authentication standards, increased by 60%.

Despite the success of the program, the NCSC noted that since 2017, the range of services provided has remained relatively constant, while the cyber capabilities of the private sector have evolved significantly. In this regard, the UK government agency, which is part of GCHQ, recognized the need to expand the coverage of ACD, since its initial services were mainly focused on the public sector.

The first step towards ACD 2.0 is to explore the current set of attack management tools: Check, Mail Check, and Early Warning. Experiments will be conducted in collaboration with industrial providers to improve these services. The NCSC also encouraged industry representatives to offer their products or ideas for future attack management experiments.

Detailed information on plans to transfer control of services will be provided in September.

Source
 
Top