Launch of Cyber Adversary Simulation Scheme Standards

The NCSC has launched the Cyber Adversary Simulation (CyAS) Scheme, which sets standards for companies providing adversary simulation services to test organizations' cyber resilience. This scheme is aimed at organizations with complex, high-risk, or nationally significant requirements, including essential service operators and UK government bodies. The scheme consists of a Company Standard, Technical Standard, Report Writing Standard, and Individual Competency Framework. Membership requires formal commitment from senior management and adherence to specified standards. The scheme is currently in its Minimum Viable Product phase and is expected to evolve over time. Companies must maintain compliance to retain membership and can only subcontract to other CyAS members.

Key Points: • The NCSC launched the Cyber Adversary Simulation Scheme to enhance cyber resilience testing. • Membership requires commitment from senior management and adherence to defined standards. • The scheme is in its Minimum Viable Product phase and may evolve over time.