The CIMA bridges the current gap between a localised cyber security incident handled by an individual state, and Australia’s national crisis management arrangements. If a national cyber incident reaches a crisis level, the CIMA will operate in support of jurisdictions’ respective crisis management arrangements. The CIMA categorises cyber incidents under National Cyber Security Arrangements (NCSA) from Level 5 to Level 1: Level 5: Normal Conditions Level 4: Lean Forward Level 3: Alert Level 2: National Cyber Incident Level 1: National Cyber Crisis Further information is available on the Cyber Incident Management Arrangements for Australian Governments page.