The NCF outlines how it conducts responsible cyber operations to
counter state threats, support military operations, and disrupt
terrorists and serious crime.
Established in 2020, the National Cyber Force (NCF) is a
partnership between GCHQ and the Ministry of Defence which
carries out cyber operations on a daily basis to protect against
threats to the UK, further the UK’s foreign policy, support
military operations, and prevent serious crime.
Following the publication of the Government’s Integrated Review
Refresh (IRR) last month, the publication of a new
document titled ‘NCF: Responsible Cyber Power in Practice’ today
delivers on the commitment in the IRR to be as transparent as
possible about the NCF’s cyber capabilities and provide clarity
on how the UK acts as a responsible and democratic cyber power.
The UK is reiterating its commitment to international stability
and security, and illustrating how states can act responsibly in
cyberspace through demonstrating how the NCF’s operations are
accountable, precise and calibrated. This contrasts with the
reckless and indiscriminate activities of those who would do harm
to the UK and its allies.
All of the NCF’s operations are conducted in a legal and ethical
manner, in line with domestic and international law and our
national values. The operations are based on a deep understanding
of the cyber environment, which enables NCF to design, time and
target them with precision.
Central to the NCF’s approach is the ‘doctrine of cognitive
effect’ – using techniques that have the potential to sow
distrust, decrease morale, and weaken our adversaries’ abilities
to plan and conduct their activities effectively. This can
include preventing terrorist groups from publishing pieces of
extremist media online or making it harder for states to use the
internet to spread disinformation by affecting their perception
of the operating environment.
The NCF’s work is covert and we therefore do not reveal details
of individual operations. Indeed the intent is sometimes that
adversaries do not realise that the effects they are experiencing
are the result of a cyber operation. This ambiguity can help to
amplify the cognitive effect.
Despite the necessary level of secrecy, in line with our
commitment to being a responsible cyber actor, we have disclosed
that over the last three years the NCF has delivered operations
to:
- protect military deployments overseas;
- disrupt terrorist groups;
- counter sophisticated, stealthy and continuous cyber threats;
- counter state disinformation campaigns;
- reduce the threat of external interference in democratic
elections; and
- remove child sexual abuse material from public spaces online.
Through ‘NCF: Responsible Cyber Power in Practice’, the UK is
reiterating its commitment to international stability and
security, and illustrating how states can act responsibly in
cyberspace, in line with domestic and international law.
Director GCHQ, Sir Jeremy Fleming, said:
In an increasingly volatile and interconnected world, to be a
truly responsible cyber power, nations must be able to contest
and compete with adversaries in cyberspace. In the UK, the
National Cyber Force complements the UK’s world class cyber
resilience to give the country operational cyber capabilities at
the scale needed to protect our free, open, and peaceful society.
Building upon two decades of experience, the dynamic new
partnership has countered state threats, made key contributions
to military operations, and disrupted terrorist cells and serious
criminals including child sex offenders.
With the threat growing and the stakes higher than ever before,
we hope this document provides a benchmark for the UK’s approach
and a basis for like-minded governments to come together
internationally to establish a shared vision and values for the
responsible use of cyber operations.
General Sir Jim Hockenhull, Commander of Strategic
Command, said:
The National Cyber Force is a crucial tool in our integrated
approach to national security and our defence of the UK.
Working across Government and with our international allies is
vital. There is a power in partnerships, and we must go further
to out-cooperate and out-compete states that are driving
instability.
The NCF is also today avowing its Commander for the first time,
as part of the Government’s commitment to provide transparency
about how the UK conducts responsible cyber operations.
James Babbage, a GCHQ intelligence officer for nearly
30 years, has led the NCF since its inception in 2020,
scaled its operations and led efforts to integrate it
effectively with a broad range of other agencies and partners.
He has spent most of his career at GCHQ, with a
secondment to the Ministry of Defence and a tour as a liaison
officer in the US.
