44 Section 5 DEFEND 5.6. MANAGING INCIDENTS AND UNDERSTANDING THE THREAT 5.6.1. The number and severity of cyber incidents affecting organisations across the public and private sector are likely to increase. We therefore need to define how both the private sector and the public engage with the Government during a cyber incident. We will ensure that the UK Government’s level of support for each sector – taking into account its cyber maturity – is clearly defined and understood. The Government’s collection and dissemination of information about the threat must be delivered in a manner and at a speed suitable for all types of organisation. The private sector, government and the public can currently access multiple sources of information, guidance and assistance on cyber security. This must be simplified. 5.6.2. We must ensure that the Government offering, both in response to incidents, and in the provision of guidance, does not exist in isolation, but in partnership with the private sector. Our incident management processes should reflect a holistic approach to incidents, whereby we learn from partners and share mitigation techniques. We will also continue to use our relationships with other Computer Emergency Response Teams (CERTs) and our allies as an integrated part of our incident management function. 5.6.3. Current incident management remains somewhat fragmented across government departments and this strategy will create a unified approach. The NCSC will deliver a streamlined and effective government-led incident response function. In the event of a serious cyber incident, we will ensure that the Armed Forces are able to provide assistance, whether in a conventional form addressing the physical impact of an incident, or in the form of National Cyber Security Strategy 2016 specialist support from regular or reserve cyber personnel. While we will provide all the support our resources will allow, the Government continues to stress the importance of industry, society and the public acting to safeguard their basic cyber security. Objectives 5.6.4. Our objectives are as follows: • the Government will provide a single, joined-up approach to incident management, based on an improved understanding and awareness of the threat and actions being taken against us. The NCSC will be a key enabler, as will partnership with the private sector, law enforcement and other government departments, authorities and agencies; • the NCSC defines clear processes for reporting incidents, tailored to the profile of the victim; and • we will prevent the most common cyber incidents, and we will have effective information-sharing structures in place to inform ‘pre-incident’ planning. Our approach 5.6.5. It is the responsibility of organisation and company management, in both the public and private sector, to ensure their networks are secure and to exercise incident response plans. In the event of a significant incident, the Government incident management process will reflect the three distinct elements of a cyber incident: the precursor causes, the incident itself and the post-incident response. 5.6.6. To deliver incident management that is effective for both government and the private sector, we will work closely to review and define the scope of the Government response to ensure it