43 Section 5 DEFEND we will maintain a coherent and consistent set of messages on cyber security guidance from both the Government and our partners. The NCSC will provide technical advice to underpin this guidance. It will reflect business and public priorities and practices, and be clear, easily accessible and consistent, while keeping pace with the threat. Law enforcement will work closely with industry and the NCSC to share the latest criminal threat intelligence, to support industry to defend itself against threats, and to mitigate the impact of attacks on UK victims. Measuring success 5.5.6. The Government will measure its success in protecting our CNI and other CYBER AWARE The Cyber Aware campaign, formerly Cyber Streetwise, gives the public the advice they need to protect themselves from cyber criminals. Targeted messaging delivered through social media and advertising and in partnership with businesses promotes: • using three random words to create a strong password; and • always downloading the latest software updates. Experts agree adopting these behaviours will provide small businesses and individuals with protection against cyber crime. Cyber Aware is currently supported by 128 crosssector partners, including the police and businesses in the retail, leisure, travel and professional services sectors. In 2015/16 an estimated 10 million adults and 1 million small businesses stated they were more likely to maintain priority sectors by assessing progress towards the following outcomes: • the UK economy’s level of cyber security is as high as, or higher than, comparative advanced economies; • the number, severity and impact of successful cyber attacks against businesses in the UK has reduced, because cyber hygiene standards have improved; and • there is an improving cyber security culture across the UK because organisations and the public understand their cyber risk levels and understand the cyber hygiene steps they need to take to manage those risks. or take up key cyber security behaviours as a result of the Cyber Aware campaign. To find out more visit cyberaware.gov.uk CYBER ESSENTIALS The Cyber Essentials scheme was developed to show organisations how to protect themselves against low-level “commodity threat”. It lists five technical controls (access control; boundary firewalls and Internet gateways; malware protection; patch management and secure configuration) that organisations should have in place. The vast majority of cyber attacks use relatively simple methods which exploit basic vulnerabilities in software and computer systems. There are tools and techniques openly available on the Internet which enable even low-skill actors to exploit these vulnerabilities. Properly implementing the Cyber Essentials scheme will protect against the vast majority of common internet threats. National Cyber Security Strategy 2016