[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-175595-105":53,"doc-detail-175595-en":126},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":119,"head_meta":121,"extra_data":123,"updated_unix":125},105,"en","cyber-security-strategy-blueprint-user-guide","Cyber Security Strategy Blueprint - User Guide","","Cyber Security Strategy Blueprint - User Guide provides councils in England with practical guidance for managing, detecting, defending against, and minimising the impact of cyber incidents in line with the National Cyber Security Centre’s Cyber Assessment Framework. It explains why a council-wide cyber security strategy matters for resilience, protection of digital assets, and safeguarding personal data. It outlines stakeholder roles and how to use the blueprint to write, update, and review strategy using structured prompt questions, with clear non-legal disclaimer guidance.",{"@graph":63,"@context":118},[64,80,101],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":11,"@type":70,"position":76},"https://docshare.wps.com/template/presentations/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/cyber-security-strategy-blueprint-user-guide/175595/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/cyber-security-strategy-blueprint-user-guide/175595.png","ImageObject",442,249,{"name":88,"@type":89},"Tawan","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/vnd.openxmlformats-officedocument.wordprocessingml.document","2026-10-19","2026-09-02",true,{"@type":98,"interactionType":99,"userInteractionCount":15},"InteractionCounter",{"@type":100},"ViewAction",{"@type":102,"mainEntity":103},"FAQPage",[104,110,114],{"name":105,"@type":106,"acceptedAnswer":107},"Why can’t councils completely eliminate cyber incident risk?","Question",{"text":108,"@type":109},"It is not possible to completely eliminate the risk of cyber incidents. Councils should instead take proportionate steps to maximise defences and minimise vulnerabilities across all services and departments.","Answer",{"name":111,"@type":106,"acceptedAnswer":112},"What key outcomes does the blueprint support for a council?",{"text":113,"@type":109},"The blueprint supports protecting services and assets so councils can continue delivering critical services. It also helps integrate cyber security into wider corporate plans, digital transformation, and ICT modernisation efforts.",{"name":115,"@type":106,"acceptedAnswer":116},"Who typically owns and drives the cyber security strategy in a council?",{"text":117,"@type":109},"Depending on the council’s size, the Director of IT/Head of IT or the Senior Information Risk Owner (SIRO) typically owns the strategy, with sufficient accountability and authority to secure resources and enable delivery.","https://schema.org",{"og:url":78,"og:type":120,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":122,"canonical":78},"index,follow",{"doc_id":124,"site_id":56},175595,1788320994,{"code":4,"msg":5,"data":127},{"doc_id":124,"user_id":128,"nickname":88,"user_avatar":129,"doc_module":9,"category_id":8,"category_name":11,"doc_title":59,"doc_description":61,"doc_content":130,"file_id":131,"file_url":132,"file_type":133,"file_size":134,"view_count":15,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":135,"language":136,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":137,"faqs":138,"seo_title":139,"seo_description":61,"update_tm":125,"read_time":140},2336475104042,"https://ap-avatar.wpscdn.com/avatar/22000c4c32af1715be0?x-image-process=image/resize,m_fixed,w_180,h_180&k=1786537525561427321","Cyber Security Strategy Blueprint\nIntroduction\nThis blueprint has been developed by the Local Government Association (LGA). It aims to assist councils in England with managing, detecting, defending against and minimising the impact of cyber incidents in line with the National Cyber Security Centre’s (NCSC) \u0013 HYPERLINK \"https://www.ncsc.gov.uk/collection/caf/cyber-assessment-framework\" \u0014Cyber Assessment Framework\u0015.\nIt is not possible to completely eliminate the risk of a cyber incident. However, councils should take steps to maximise defences and minimise vulnerabilities in a way that is proportionate to the risks faced by the authority across all its services and departments. Developing a cyber security strategy is an important step in doing this.\nThis blueprint outlines the key things to consider when writing or updating a cyber security strategy. It sets out an approach to protecting services and assets which enable councils to continue delivering critical services for the benefit of local communities.\nIt is recommended that the blueprint is read in conjunction with our \u0013 HYPERLINK \"https://www.local.gov.uk/publications/lga-cyber-360-framework\" \\l \"introduction\" \u0014Cyber 360 Framework\u0015. This is a resource which supports councils to develop their security and resilience capabilities and knowledge in line with existing good practice, advice, and standards.\nDisclaimer: This blueprint is meant to provide general guidelines and should be used as a reference. It may not take into account all relevant local and national considerations and is not a legal document. The LGA will not assume any legal liability that may arise from the use of this document.\n\u000f\nUser Guide\nWhy develop a cyber security strategy?\nA cyber security strategy is an organisation’s strategic plan for building cyber resilience. It sets out a vision for managing cyber risks, mitigating vulnerabilities, and ensuring the confidentiality, integrity, and availability of an organisation’s digital resources. It does this by setting out an organisation’s approach to protecting its information systems, networks, data, and digital assets from potential threats, attacks, and unauthorised access.\nThis is important in ensuring that councils can provide critical services to local communities. Councils across the country continue to pursue new, emerging, and innovative ways to deliver improvement to services through digital, data and technology. From tech enabled care to machine learning and implementing cloud solutions, there are wide ranging opportunities for local government to streamline the delivery of services, save costs and create better outcomes for residents.  However, councils also need to consider and mitigate associated security risks.\nAs a custodian of large datasets and a service provider to some of the most vulnerable in society, it is also essential that councils take steps to protect personal data.\nA cyber security strategy therefore acts as a key enabler for the council’s wider corporate plan, digital transformation ambitions and ICT modernisation strategy by setting out an approach to minimise existing and emerging cyber risks.\nThere are also a number of other benefits to having a strategy in place:\nThe NCSC’s \u0013 HYPERLINK \"https://www.ncsc.gov.uk/collection/board-toolkit/embedding-cyber-security-into-your-organisation\" \u0014Cyber Security Toolkit for Board Members\u0015 recommends creating a strategy to reduce risk, financial impact and reputational damage to an organisation.\nIt can be helpful in demonstrating the organisation’s cyber security vision which can be useful for external suppliers, partners and auditors when considering an organisation’s cyber security maturity.\nIt can also be used to mobilise resources and bring together existing policies, processes, sub policies and standards - for example an Information Security Policy and ISO/IEC27001 standard - into one overarching strategy.\nIt can foster a multi-disciplinary approach to managing cyber risk by promoting c","cbCaiuYbfvPEQJDw","https://ap.wps.com/l/cbCaiuYbfvPEQJDw","docx",137015,23,"English","# Introduction\n## Why develop a cyber security strategy?\n## Who should use this Blueprint?\n## How to use this Blueprint","[{\"question\":\"Why can’t councils completely eliminate cyber incident risk?\",\"answer\":\"It is not possible to completely eliminate the risk of cyber incidents. Councils should instead take proportionate steps to maximise defences and minimise vulnerabilities across all services and departments.\"},{\"question\":\"What key outcomes does the blueprint support for a council?\",\"answer\":\"The blueprint supports protecting services and assets so councils can continue delivering critical services. It also helps integrate cyber security into wider corporate plans, digital transformation, and ICT modernisation efforts.\"},{\"question\":\"Who typically owns and drives the cyber security strategy in a council?\",\"answer\":\"Depending on the council’s size, the Director of IT/Head of IT or the Senior Information Risk Owner (SIRO) typically owns the strategy, with sufficient accountability and authority to secure resources and enable delivery.\"}]","Cyber Security Strategy Blueprint - User Guide | DOCX",8]