UK Ministry of Housing, Communities and Local Government (MHCLG) 
MHCLG’s Local Digital Cyber programme helps councils to respond to cyber threats through collaboration and knowledge sharing. Our approach brings together cyber security data, expertise and capabilities from across government and the wider sector to help councils strengthen their cyber resilience.
Government Cyber Action Plan
The Government Cyber Action Plan sets out how government will rapidly improve the cyber security and resilience of public services.
It supports a more joined up approach to cyber security by strengthening accountability, improving central support, coordinating services, and enabling government and the wider public sector to share data, expertise and capabilities more effectively.
Responding to cyber threats
In line with the Government Cyber Action Plan, Local Digital supports a more joined-up approach to cyber security by helping councils and the wider public sector to:
- reduce the impact of cyber incidents through cross-government coordination, improving council’s responses, and minimising disruption from repeated or scaled attacks
- sharing cyber intelligence, tools and good practice to strengthen resilience across the sector
Responding to cyber incidents
MHCLG has made a Cyber Incident Response (CIR) service available to help councils respond quickly and effectively to severe cyber incidents.
The service gives eligible councils access to a National Cyber Security Centre (NCSC) assured provider for containment and eradication support following a significant cyber incident.
If your council experiences a cyber incident, you should report it through the NCSC reporting portal. Where appropriate, incidents should also be reported to:
- the Information Commissioner’s Office (ICO)
- the National Crime Agency (NCA) or by calling 0300 123 2040
- your regional Warning Advice and Reporting Point (WARP) to support threat intelligence sharing across the sector
The NCSC shares reports with MHCLG. We monitor the reports 24 hours a day, 7 days a week to assess whether the incident meets the threshold for activating the CIR service.
Further details, including eligibility, activation criteria, and reporting requirements, are available in our CIR service guidance for councils.
Sharing cyber intelligence
We are exploring ways to share cyber threat and vulnerability information with councils. Our main method is through GovNotify alerts.
GovNotify alerts provide information about critical cyber threats, vulnerabilities and government recommended good practice. We want feedback on each alert to improve our communications to make sure the information we share is relevant, timely and actionable.
Sign up to register your interest.
Resources
Our cyber resilience resource brings together services to help strengthen your council’s cyber posture.
The services listed are provided for information only. Councils should review the service before signing -up and remain responsible for deciding whether it meets their needs.
This page includes services that are:
- free to use
- available to UK councils
Stay updated and get involved
Sign up to our newsletter for the latest updates on the Local Digital Cyber programme, including upcoming pilots and opportunities to take part.
To ask a question, or get involved in a future pilot, email [email protected]