How to plan your organisation's response to severe cyber threat

Cyber incidents targeting organisations – particularly those against critical national infrastructure (CNI) – are becoming more frequent, sophisticated and potentially destructive. This is happening against a backdrop of greater geopolitical instability, rapid technological advances, and increasingly capable adversaries. In an environment where cyber threat escalates to ‘severe’, it is feasible that highly capable threat actors would target the UK’s CNI to cause major disruption.