Terminology: it's not black and white
The NCSC now uses 'allow list' and 'deny list' in place of 'whitelist' and 'blacklist'. Emma W explains why...
NCSC Feed
Telling users to ‘avoid clicking bad links’ still isn’t working
2 months 2 weeks ago
Why organisations should avoid ‘blame and fear’, and instead use technical measures to manage the threat from phishing.
Tackling the 'human factor' to transform cyber security behaviours
2 months 2 weeks ago
ThinkCyber's CEO Tim Ward reflects on the challenges that startups face when developing innovative products.
Supplier assurance: having confidence in your suppliers
2 months 2 weeks ago
Questions to ask your suppliers that will help you gain confidence in their cyber security.
Studies in secure system design
2 months 2 weeks ago
Worked examples for Operational Technology and Virtualised systems, using the NCSC’s secure design principles
Spotlight on shadow IT
2 months 2 weeks ago
New guidance to help organisations manage rogue devices and services within the enterprise.
Smart devices: new law helps citizens to choose secure products
2 months 2 weeks ago
Download the NCSC’s point-of-sale leaflet explaining how new PSTI regulation affects consumers and retailers.
SCADA 'in the cloud': new guidance for OT organisations
2 months 2 weeks ago
If migrating SCADA solutions to the cloud, cyber security must be a key consideration for operational technology organisations.
SBOMs and the importance of inventory
2 months 2 weeks ago
Can a Software Bill of Materials (SBOM) provide organisations with better insight into their supply chains?
RITICS: Securing cyber-physical systems
2 months 2 weeks ago
Discover the Research Institute in Trustworthy Inter-connected Cyber-physical Systems.
Revolutionising identity services using AI
2 months 2 weeks ago
The ‘NCSC for Startups’ alumnus giving identity verification the 'Trust Stamp'
Researching the hard problems in hardware security
2 months 2 weeks ago
Introducing the next chapter of the NCSC research problem book, which aims to inspire research on the biggest impact topics in hardware cyber security.
Relaunching the NCSC's Cloud security guidance collection
2 months 2 weeks ago
Andrew A explains what's new in a significant update to the NCSC's flagship cloud guidance.
Refreshed 'cyber security toolkit' helps board members to govern online risk
2 months 2 weeks ago
Lindy Cameron, CEO, introduces changes to the NCSC’s cyber security resources specifically designed for board members.
Ransomware and the cyber crime ecosystem
2 months 2 weeks ago
A new white paper examines the rise of 'ransomware as a service' and extortion attacks.
Raising the cyber resilience of software 'at scale'
2 months 2 weeks ago
New ‘Code of Practice for Software Vendors’ will ensure that security is fundamental to developing and distributing products and services.
QR Codes - what's the real risk?
2 months 2 weeks ago
How safe is it to scan that QR code in the pub? Or in that email?
Protecting how you administer cloud services
2 months 2 weeks ago
New advice on implementing high-risk and ‘break-glass’ accesses in cloud services.
Protecting PBX from cyber attacks
2 months 2 weeks ago
Why small organisations need to manage their private branch exchange (PBX) telephone networks.
Protecting parked domains for the UK public sector
2 months 2 weeks ago
Non-email sending (parked) domains can be used to generate spam email, but they're easy to protect.
Checked
9 hours 8 minutes ago
This includes feeds from report, guidance and blog-post
NCSC Feed feed