24.11.2025 - The National Cyber Security Centre (NCSC) has developed a Cybersecurity and Resilience Method (CSRM) to help organisations take a more structured approach to these topics and strengthen their overall security. To improve the method's effectiveness and practicality, the NCSC is collaborating closely with selected partners and interested stakeholders. Organisations and companies are invited to participate in the ongoing consultation, which runs until the end of January, and share their feedback.
As digitalisation becomes increasingly prevalent in society and the business world, ensuring cybersecurity and resilience is becoming an ever-greater challenge. Although there are many standards, recommendations and models, organisations often struggle to know where to start or how improve their cybersecurity and resilience sustainably. What is often lacking are concrete, practical guidelines and points of reference.
The NCSC has therefore developed the new Cybersecurity and Resilience Method (CSRM). The CSRM's overarching aim is to provide organisations of all sizes and from all sectors with a structured approach to these issues, enabling them to strengthen their security in a sustainable way. This will better equip them to defend themselves against ongoing threats and risks in cyberspace.
The CSRM is based on an enhanced baseline security approach and consists of five steps, which can either be followed strictly in sequence, or based on priority. The aim is to identify and implement suitable technical and organisational measures. The method also includes an assessment and performance comparison option (benchmarking).
The CSRM will be made available to the public as a recommendation. Industry associations may adopt the method and recommend it to their members. Regulators can adapt the method to suit their needs, and declare it binding within their areas of responsibility.
Your opinion matters to us!
To ensure that the CSRM is as effective and well developed as possible, the NCSC is conducting a consultation until the end of January. Interested parties are invited to contribute and help shape the final version of the method.
Last modification 24.11.2025
