NCSC Feed

How operators of critical national infrastructure (CNI) can use NCSC guidance and blogs to secure their internet-facing services.

Why it's important to protect the interfaces used to manage your infrastructure, and some recommendations on how you might do this.

New guidance to protect your brand from being exploited online, and to help you choose alternate authentication models.

As attackers' tactics change, so must network defenders'.

Explaining the forthcoming NCSC Technology Assurance Principles.

Although the UK has not experienced severe cyber attacks in relation to Russia’s invasion of Ukraine, now is not the time for complacency.

Jeremy B explains how the NCSC will help organisations plan their migration to PQC.

For large, complex firms struggling with the prescriptiveness of Cyber Essentials, ‘Pathways’ will provide a new route to certification.

Introducing a new set of NCSC principles to strengthen the resilience of organisations' cloud backups from ransomware attackers.

How to protect your backups that are stored in the public cloud.

Our updated multi-factor authentication (MFA) guidance recommends organisations use techniques that give better protection against phishing attacks.

Refreshed guidance published to help practitioners manage cyber risk.

The announcement of the Cyber Security and Resilience Bill is a landmark moment in tackling the growing threat to the UK's critical systems.

The NCSC produces advice for practitioners working with victims who are being tracked, stalked, or virtually monitored.

NCSC publishes free e-learning to help organisations manage the cyber security risks across their supply chains.

Henry O discusses the pitfalls of performing a basic ‘lift and shift’ cloud migration.

A new visual guide to the cyber security principles that are essential when developing and managing ‘smart cities’.

Cyber Advisor scheme for small organisations welcomes its 100th advisor, but more still needed!

The NCSC’s e-learning package 'Top Tips For Staff' can be completed online, or built into your own training platform.

Raising a cheer for SaaS vendors who respond to our cloud security principles.