NCSC Feed

Questions to ask your suppliers that will help you gain confidence in their cyber security.

Worked examples for Operational Technology and Virtualised systems, using the NCSC’s secure design principles

New guidance to help organisations manage rogue devices and services within the enterprise.

Download the NCSC’s point-of-sale leaflet explaining how new PSTI regulation affects consumers and retailers.

If migrating SCADA solutions to the cloud, cyber security must be a key consideration for operational technology organisations.

Can a Software Bill of Materials (SBOM) provide organisations with better insight into their supply chains?

Discover the Research Institute in Trustworthy Inter-connected Cyber-physical Systems.

The ‘NCSC for Startups’ alumnus giving identity verification the 'Trust Stamp'

Introducing the next chapter of the NCSC research problem book, which aims to inspire research on the biggest impact topics in hardware cyber security.

Andrew A explains what's new in a significant update to the NCSC's flagship cloud guidance.

Lindy Cameron, CEO, introduces changes to the NCSC’s cyber security resources specifically designed for board members.

A new white paper examines the rise of 'ransomware as a service' and extortion attacks.

New ‘Code of Practice for Software Vendors’ will ensure that security is fundamental to developing and distributing products and services.

How safe is it to scan that QR code in the pub? Or in that email?

New advice on implementing high-risk and ‘break-glass’ accesses in cloud services.

Why small organisations need to manage their private branch exchange (PBX) telephone networks.

Non-email sending (parked) domains can be used to generate spam email, but they're easy to protect.

How operators of critical national infrastructure (CNI) can use NCSC guidance and blogs to secure their internet-facing services.

Why it's important to protect the interfaces used to manage your infrastructure, and some recommendations on how you might do this.

New guidance to protect your brand from being exploited online, and to help you choose alternate authentication models.