NCSC Feed

How 'small but actionable' insights can improve behaviours and decision making.

A new initiative, aimed at 11 to 14-year-olds, that helps them navigate the risks of online life.

Cyber security-themed videos, blogs and interviews from industry experts are supporting students and teachers.

New presentation includes voiceover and insights on ransomware attack on the British Library.

New NCSC training package to help schools improve their cyber security.

A new NCSC scheme assuring providers of CAF-based audits is now open for potential members.

NCSC-assured CRA service now offering Cyber Assessment Framework based audits and more applications invited from potential service providers.

Can an equivalent cyber security standard deliver the same outcomes as the NCSC’s Cyber Essentials scheme?

Sara Ward, the CEO of Black Country Women's Aid, discusses her organisation's experience of gaining Cyber Essentials Plus certification.

We are encouraging large organisations to help us develop an alternative route to certification.

Latest version of the CAF reflects the increased threat to critical national infrastructure

A Critical National Infrastructure (CNI)-specific look at NCSC guidance on remote access architecture design

Our research shows that using Serverless components makes it easier to get good security in the cloud

Free online tool from the NCSC prevents cyber criminals using your email to conduct cyber attacks.

Do loose prompts* sink ships? Exploring the cyber security issues of ChatGPT and LLMs.

Updated NCSC guidance on enabling your staff to use their own devices for work.

How to disrupt targeted phishing attacks aimed at senior executives or budget holders.

The NCSC has published new cryptographic research on robust cryptography – we explain its significance and how the ideas could support research to inform future global standards.

The NCSC is inviting UK organisations to contribute evidence of cyber deception use cases and efficacy to support our long-term research goals.

Risk appetites; what are they, what’s their purpose, how do organisations go about defining them?