NCSC Pilot Project Identifies Barriers and Risks in Cyber Deception
Summary
Hide ▲
Show ▼
The UK's National Cyber Security Centre (NCSC) has shared findings from a pilot project under the Active Cyber Defence (ACD) 2.0 program, involving 121 organizations and 14 cyber-deception solution providers. The project aims to establish an evidence base for cyber deception use cases at a national scale. Key findings include challenges in generating outcome-based metrics, inconsistent terminology, a guidance gap, risks of improper tool configuration, and the strategic advantage of not advertising deception tools. The NCSC plans to deploy thousands of deception solutions across various environments to improve national resilience by imposing costs on adversaries.
Timeline
-
12.12.2025 12:30 1 articles · 23h ago
NCSC Shares Findings from Cyber Deception Pilot Project
The NCSC has shared findings from a pilot project under the Active Cyber Defence (ACD) 2.0 program, involving 121 organizations and 14 cyber-deception solution providers. The project aims to establish an evidence base for cyber deception use cases at a national scale. Key findings include challenges in generating outcome-based metrics, inconsistent terminology, a guidance gap, risks of improper tool configuration, and the strategic advantage of not advertising deception tools. The NCSC plans to deploy thousands of deception solutions across various environments to improve national resilience by imposing costs on adversaries.
Show sources
- NCSC Plugs Gap in Cyber-Deception Guidance — www.infosecurity-magazine.com — 12.12.2025 12:30
Information Snippets
-
The NCSC pilot project involved 121 UK organizations and 14 cyber-deception solution providers.
First reported: 12.12.2025 12:301 source, 1 articleShow sources
- NCSC Plugs Gap in Cyber-Deception Guidance — www.infosecurity-magazine.com — 12.12.2025 12:30
-
Five key findings were highlighted, including challenges in generating outcome-based metrics and inconsistent terminology.
First reported: 12.12.2025 12:301 source, 1 articleShow sources
- NCSC Plugs Gap in Cyber-Deception Guidance — www.infosecurity-magazine.com — 12.12.2025 12:30
-
A guidance gap was identified, lacking impartial advice and real-world case studies.
First reported: 12.12.2025 12:301 source, 1 articleShow sources
- NCSC Plugs Gap in Cyber-Deception Guidance — www.infosecurity-magazine.com — 12.12.2025 12:30
-
Improper tool configuration can lead to undetected threats and a false sense of security.
First reported: 12.12.2025 12:301 source, 1 articleShow sources
- NCSC Plugs Gap in Cyber-Deception Guidance — www.infosecurity-magazine.com — 12.12.2025 12:30
-
90% of organizations prefer not to advertise their use of cyber-deception tools.
First reported: 12.12.2025 12:301 source, 1 articleShow sources
- NCSC Plugs Gap in Cyber-Deception Guidance — www.infosecurity-magazine.com — 12.12.2025 12:30
-
The NCSC plans to deploy 5,000 low- and high-interaction solutions on the UK internet and 20,000 inside internal networks.
First reported: 12.12.2025 12:301 source, 1 articleShow sources
- NCSC Plugs Gap in Cyber-Deception Guidance — www.infosecurity-magazine.com — 12.12.2025 12:30
-
Additionally, 200,000 low-interaction solutions will be deployed in cloud environments and two million honeytokens.
First reported: 12.12.2025 12:301 source, 1 articleShow sources
- NCSC Plugs Gap in Cyber-Deception Guidance — www.infosecurity-magazine.com — 12.12.2025 12:30
-
Cyber deception can impose costs on adversaries by forcing them to navigate false environments.
First reported: 12.12.2025 12:301 source, 1 articleShow sources
- NCSC Plugs Gap in Cyber-Deception Guidance — www.infosecurity-magazine.com — 12.12.2025 12:30