Our governance - National Cyber Force
The National Cyber Force conducts offensive cyber effects operations in line with a well-established legal framework with the UK’s democratic values and principles at the heart.
How the UK acts responsibly in cyberspace
The UK acts responsibly in cyberspace. This means the UK believes in a rules-based order in cyberspace. The same way there needs to be a rules-based order in the real world.
Rules stop countries using malign influence to impose their will on smaller ones. They also make it easier to cooperate with one another to promote global stability, health, and prosperity. Rules allow us to tackle shared threats and avoid escalation that can end in conflict too.
National Cyber Force operations are legal, responsible and accountable
The National Cyber Force designs and carries out offensive cyber effects operations in line with a well-established legal framework. We do this with the UK’s democratic values and principles at the heart of them.
Through training and partnerships, we work with close allies and other nations to share expertise and agree a coordinated and collective response to the threats we face. Where there is evidence of wrongdoing by state threats, we will expose this behaviour.
National Cyber Force operations are legally compliant and authorised
As a responsible actor in cyberspace, the UK is expected to operate in a legal, ethical and responsible way.
A lot of operational planning goes into each operation based on our deep knowledge of cyberspace. Each operation is timed and precisely targeted to avoid unnecessary wider damage. An operation must be authorised and legally compliant with both the UK and international law before it is allowed to go ahead.
Any National Cyber Force activity must also support the UK’s values and commitment to being a responsible cyber power. Being a responsible cyber power means we behave ethically and responsibly to promote stability and cooperation in cyberspace.
The laws National Cyber Force work under
-
Intelligence Services Act 1994 (ISA)
-
Investigatory Powers Act 2016 (IPA)
-
Regulation of Investigatory Powers Act 2000 (RIPA).
Oversight and accountability
Accountability for National Cyber Force activities is held jointly by the Secretary of State for Foreign, Commonwealth and Development Affairs, and the Secretary of State for Defence.
National Cyber Force’s activities are subject to approval by Ministers, judicial oversight and Parliamentary scrutiny, making the UK’s governance for offensive cyber effects operations one of the strongest in the world.