NCCCI National Computer Incident Coordination Centre

The National Coordination Center for Computer Incidents (NCCCA) provides coordination of the activities of the subjects of the critical information infrastructure (CII) of the Russian Federation on the detection, prevention and elimination of the consequences of computer attacks and response to computer incidents.

The main functions of NCCC include:

• Coordination and direct involvement in computer incident response activities;
• participation in the detection, prevention and elimination of the consequences of computer attacks;
• informing the subjects of the critical information infrastructure about the means and methods of conducting computer attacks and methods of their prevention and detection;
• collecting, storing and analyzing information on computer incidents and computer attacks, as well as analyzing the effectiveness of measures to detect, prevent and eliminate the consequences of computer attacks and respond to computer incidents.

History

2022: FSB took up accreditation of cyber attack monitoring centers

On June 1, 2022, it became known about the FSB order, according to which the centers of the state system for detecting, preventing and eliminating the consequences of computer attacks (State system of detection, prevention and elimination of consequences of computer attacks) will have to be accredited at the National Coordination Center for Computer Incidents (NCCCA). Read more here.

2020

The center for monitoring and response of the "Security Code" received the right to perform the functions of the State system of detection, prevention and elimination of consequences of computer attacks center

On March 5, 2020, the Security Code company announced the launch of the Security Code Monitoring and Response Center, as well as the signing of a cooperation agreement with the National Coordination Center for Computer Incidents (NCCC), the purpose of which is to organize interaction in the field of detection, prevention and elimination of computer attacks within the State system of detection, prevention and elimination of consequences of computer attacks. Read more here.

Jet CSIRT received the right to act as an operator State system of detection, prevention and elimination of consequences of computer attacks

On February 25, 2020, Jet Infosystems announced the conclusion of an agreement on the interaction of the IBJet CSIRT Incident Monitoring and Response Center with the National Coordination Center for Computer Incidents (NCCC) to provide expert services for organizing interaction with State system of detection, prevention and elimination of consequences of computer attacks. Read more here.

2019

Angara Professional Assistance received the right to act as an operator State system of detection, prevention and elimination of consequences of computer attacks

Angara Professional Assistance on October 11, 2019 announced the signing of an agreement on interaction with the "National Coordination Center for Computer Incidents" (NCCCA) as part of the functions of the State system of detection, prevention and elimination of consequences of computer attacks operator for the subjects of the critical information infrastructure (CII) of the Russian Federation in accordance with Federal Law No. 187 of July 26, 2017 "On the Security of the Critical Information Infrastructure of the Russian Federation" and its by-laws in all branches of CII. Read more here.

Get the right to initiate site locks

On August 6, 2019, it became known that the National Coordination Center for Computer Incidents (NCCC) of the FSB was among the competent organizations of the Coordination Center for Domains.ru/.rf (CC RF). This will allow the FSB structure to block sites faster than the court and Roskomnadzor. Read more here.

Infosecurity acquired the right to execute functions of the State system of detection, prevention and elimination of consequences of computer attacks center for subjects CUES of the Russian Federation

The company "Infosecuriti" (part of the Civil Softline Code) on July 4, 2019 announced the signing of a cooperation agreement with the National Coordination Center for Computer Incidents (NCCCA), the purpose of which is to organize cooperation in the field of detection, prevention and liquidation computer attacks within the framework. State system of detection, prevention and elimination of consequences of computer attacks The agreement gives the Center for Monitoring and Incident Response " INFORMATION SECURITY Infosecuriti" (I)SOC the right to perform the functions of the GosSOPKA center for subjects. critical information infrastructure RUSSIAN FEDERATION More. here

2018: Establishment of a National Cyber Threat Centre

On September 10, 2018, it became known about the creation by the Federal Security Service (FSB) of a center to combat cyber threats. The new structure, called the National Coordination Center for Computer Incidents (NCCCI), will have broad powers. The order of the FSB on the creation of the center was published on the portal of disclosure of legal information.

The National Coordination Center for Computer Incidents (NCCCA) is an integral part of the forces designed to detect, prevent and eliminate the consequences of computer attacks and respond to computer incidents, the document says.

The task of the NCCCA will be to coordinate the subjects of the critical information infrastructure in such incidents. The structure will coordinate government agencies and companies with their own IT systems from power, transport, communications, financial markets, including banks, from industry, including defense.

FSB created a structure to combat cyber attacks

In its work, NCCCI will be able to attract specialized organizations and experts. The information protection and special communications center of the FSB will be responsible for the information, analytical, organizational and material support of the new structure.

Separately, it is noted that NCCCI may refuse to transfer information to the competent authorities of a foreign state or international organization, if this threatens the security of Russia.

The center will be headed by a director who will combine this position with the post of deputy head of the scientific and technical service - head of the Center for Information Protection and Special Communications of the FSB.

The center was created as part of the implementation of the law "On the Security of Critical Information Infrastructure," adopted in July 2017, which established criminal liability for cyber attacks on critical infrastructure.^[1]"

Notes