NCSC Feed

Helping to make cloud backups resistant to the effects of destructive ransomware.

A new Cyber Incident Exercising scheme is now open for organisations to apply to be Assured Providers, with IASME and CREST as our delivery partners.

Announcing CREST as our first delivery partner and the scheme's readiness for incident response providers to join.

For environments that are secure by design, a 'full-fat SOC' is not always required.

Eleanor Fairford, Deputy Director of Incident Management at the NCSC, and Mihaela Jembei, Director of Regulatory Cyber at the Information Commissioner’s Office (ICO), reflect on why it’s so concerning when cyber attacks go unreported – and look at some of the misconceptions about how organisations respond to them.

Catherine H reflects on how the changes to the refreshed Assured Cyber Security Consultancy scheme go deeper than just a new name - and welcomes two new consultancies to the scheme.

What the UK Cyber Security Council's Chartership programme means for the CCP scheme and the organisations who use CCP for recruitment and development.

In our third blog about migrating to a zero trust architecture, we consider the security properties of an Always On VPN, and the factors to consider when deciding if you no longer need one.

How organisations working in high-risk countries can improve their cyber resilience.

New report outlines the growing threat that charities face, and how they can become resilient to cyber attacks.

Andrew A explains what you must check before giving Managed Service Providers (MSPs) the keys to your kingdom.

Anne W takes stock of where we are following the changes to Cyber Essentials in early 2022, discussing some of the feedback received and clarifying some common misconceptions.

Why striving for better (rather than perfect) security will help more people stay safer online.

In a perfect world we'd use unique passwords for every online service. But the world isn't perfect...

Emma W on why supporting users to do the right things is better then telling them what to do.

Allow your website to accept pasted passwords - it makes your site more secure, not less.

Toby L, Technical Lead for Incident Management, explains how modern-day ransomware attacks are evolving.

Andrew A puts some context around the recently published KRACK guidance and explains why patching - once again - is the answer.

Jon L provides an update on the NCSC's guidance on the 'WannaCry' ransomware.

MalwareTech's blog post on coming across a kill switch to stop the spread of the recent ransomware incident.