Updated: The NCSC is encouraging UK organisations to take immediate action to mitigate a security issue affecting PHP ...

Please enable JavaScript in your web browser to get the best experience.

Prevention and detection aren’t enough: resilience means building systems which can operate and recover following a disruptive cyber intrusion. The cost to Marks and Spencer and its insurers following ...

Please enable JavaScript in your web browser to get the best experience.

Please enable JavaScript in your web browser to get the best experience.

An APC document is the key artefact for any assurance service using the NCSC Principles Based Assurance (PBA) method. The APC plays the role of a standard in traditional compliance-based assurance ...

What tasks will employees be permitted or encouraged to do from their own devices? What will they not be permitted to do? For example, you may want your employees to submit expense reports from their ...

This guidance is for domain registrars and operators of Domain Name System (DNS) services. It sets out outcomes and recommendations to promote good practice in a set of principles, and aims to reduce ...

How threat modelling can help inform risk management decisions and cyber security risk management control choices. We recommend that threat modelling be used to inform the development and design of ...

Please enable JavaScript in your web browser to get the best experience.

Please enable JavaScript in your web browser to get the best experience.