The National Cyber Force Established in 2020, the National Cyber Force (NCF) is responsible for operating in and through cyberspace to counter, disrupt, degrade and contest those who would do harm to the UK or its allies, to keep the country safe and to protect and promote the UK’s interests at home and abroad. The NCF is made up of a roughly equal share of personnel from defence and intelligence and brings together their expertise, resources and authorities under a single command structure. It will be based in Samlesbury, Lancashire. The NCF delivers a broad range of outcomes in the interests of national security, such as support to defence, the UK’s economic wellbeing and the prevention of serious crime. NCF activities range, from the tactical through to the strategic, against both state actors and non-state actors. Its work falls into three main categories: • Countering threats from terrorists, criminals and states using the internet to operate across borders in order to do harm to the UK and other democratic societies • Countering threats which disrupt the confidentiality, integrity and availability of data and services in cyberspace (i.e. supporting cybersecurity) • Contributing to UK Defence operations and helping deliver the UK’s foreign policy agenda (for example intervening in a humanitarian crisis to protect civilians) 42 National Cyber Strategy NCF operations can be used to influence individuals and groups, disrupt online and communications systems and degrade the operations of physical systems. This type of activity is often referred to as offensive cyber (OC). NCF operations are conducted in line with a well-established legal framework, which includes the Intelligence Services Act 1994 and the Investigatory Powers Act 2016. The UK has previously made it clear that it develops and deploys capabilities in accordance with international law, including the law of armed conflict where applicable. Its activities are subject to ministerial approval, judicial oversight and parliamentary review, making the UK’s governance regime for cyber operations one of the strongest in the world.