1. Who are NPSA?
NPSA is the UK's national technical authority (NTA) for physical and personnel security, countering terrorism and hostile state activity to keep our country safe. Our core customers are the UK's critical national infrastructure (CNI), government, and other high risk, sensitive sectors. Our advice delivery extends to other nationally important assets or events, including high-profile iconic targets, where impact of damage would be equally serious.
NPSA is one of the UK's three NTAs that work closely together to provide holistic protective security advice. The others are:
- The National Cyber Security Centre (NCSC). The NCSC is the UK's NTA for cyber security.
- The UK National Authority for Counter Eavesdropping (UKNACE). UKNACE is the UK's NTA for technical security.
2. What is the CNI?
National Infrastructure is made up of the systems (people; processes; information; technology; facilities) necessary for a country to function and upon which daily life depends. Critical National infrastructure (CNI) is a sub-set of these systems that provides vital services to the UK, that if their operation were disrupted or compromised would have a significant impact on the country. CNI also includes some functions, sites and organisations which are not critical to the maintenance of essential services, but which need protection due to the potential danger to the public (civil nuclear and chemical sites for example).
There are 13 national infrastructure sectors: Chemicals, Civil Nuclear, Communications, Defence, Emergency Services, Energy, Finance, Food, Government, Health, Space, Transport and Water. Several sectors have defined 'sub-sectors'; Emergency Services for example can be split into Police, Ambulance, Fire Services and Coast Guard.
Each sector has one or more Lead Government Department(s) (LGD) responsible for the sector, and ensuring protective security is in place for critical assets. The responsible LGD for some sectors may come from within one of the Devolved Administrations.
3. I want to make a Freedom Of Information Act (FOIA) request.
NPSA is not a public body for the purposes of the Freedom of Information Act, so unfortunately we are unable to process these requests.
4. How is CNI designated?
The relevant Lead Government Department (LGD) for a sector is responsible for identifying and classifying CNI. However, for a System to be classified as CNI, it must meet the UK government's official definition:
Those critical elements of infrastructure (namely assets, facilities, systems, networks or processes and the essential workers that operate and facilitate them), the loss or compromise of which could result in:
a) Major detrimental impact on the availability, integrity or delivery of essential services - including those services whose integrity, if compromised, could result in significant loss of life or casualties - taking into account significant economic or social impacts; and/or
b) Significant impact on national security, national defence, or the functioning of the state.
If you think your organisation is responsible for CNI assets or capabilities you should approach your Lead Government department.
5. How do I get my product included in the Catalogue of Security Equipment?
Please supply a technical summary of your product using the Product Submission Process and one of the team will make an initial assessment and contact you with further details.