NCSC Feed

Why the NCSC decided to advise against this long-established security guideline.

Whilst not a password panacea, using 'three random words' is still better than enforcing arbitrary complexity requirements.

Chris Ensor highlights some important elements of the NCSC's new Technology Assurance strategy.

Latest version of the CAF focusses on clarification and consistency between areas of the CAF.

Reflecting on the positive impact of the Vulnerability Reporting Service – and introducing something new for selected contributors.

The NCSC now uses 'allow list' and 'deny list' in place of 'whitelist' and 'blacklist'. Emma W explains why...

Why organisations should avoid ‘blame and fear’, and instead use technical measures to manage the threat from phishing.

ThinkCyber's CEO Tim Ward reflects on the challenges that startups face when developing innovative products.

Questions to ask your suppliers that will help you gain confidence in their cyber security.

Worked examples for Operational Technology and Virtualised systems, using the NCSC’s secure design principles

New guidance to help organisations manage rogue devices and services within the enterprise.

Download the NCSC’s point-of-sale leaflet explaining how new PSTI regulation affects consumers and retailers.

If migrating SCADA solutions to the cloud, cyber security must be a key consideration for operational technology organisations.

Can a Software Bill of Materials (SBOM) provide organisations with better insight into their supply chains?

Discover the Research Institute in Trustworthy Inter-connected Cyber-physical Systems.

The ‘NCSC for Startups’ alumnus giving identity verification the 'Trust Stamp'

Introducing the next chapter of the NCSC research problem book, which aims to inspire research on the biggest impact topics in hardware cyber security.

Andrew A explains what's new in a significant update to the NCSC's flagship cloud guidance.

Lindy Cameron, CEO, introduces changes to the NCSC’s cyber security resources specifically designed for board members.

A new white paper examines the rise of 'ransomware as a service' and extortion attacks.