Britain Launches New Scheme to Test Critical Infrastructure Against Cyberattacks

Technology & Cybersecurity | 12th November 2026

Britain's National Cyber Security Centre (NCSC) has launched a new scheme to help essential organisations assess their ability to withstand realistic cyberattacks.

Announced on 11th November, the Cyber Adversary Simulation (CyAS) scheme will provide organisations with access to independently assessed cybersecurity testing providers.

The initiative is intended particularly for government departments, critical national infrastructure operators and organisations responsible for essential services.

Simulating Real Cyberattacks

Unlike conventional penetration testing, CyAS examines how organisations respond to realistic attack scenarios developed around their systems and vulnerabilities.

Testing providers will assess whether security teams can prevent, detect and respond to simulated intrusions.

The scheme establishes a common testing standard and allows regulators to obtain more consistent evidence of organisational cyber resilience.

The programme complements existing NCSC frameworks, including the Cyber Assessment Framework and Cyber Resilience Audit scheme.

It will initially operate as a limited pilot, allowing the NCSC to refine its methodology before wider implementation.

The initiative comes amid continuing concerns about cyber threats affecting energy, healthcare, transport and communications infrastructure.