Focused on automating UEFI firmware updates on Windows devices.

A structured look at what data to collect for security purposes and when to collect it.

The NCSC has published a new RFC on Indicators of Compromise to support cyber security in protocol design – and hopes to encourage more cyber defenders to engage with international standards.

Ian Levy, the NCSC’s departing Technical Director, discusses life, the universe, and everything.

Worked examples for Operational Technology and Virtualised systems, using the NCSC’s secure design principles

The NCSC’s e-learning package ‘Top Tips For Staff’ can be completed online, or built into your own training platform.

A new visual guide to the cyber security principles that are essential when developing and managing ‘smart cities’.

Managing the cyber security of high profile events in the real and virtual worlds.

Implementing asset management for good cyber security.

Guidance for organisations that use, own, or operate an online service who are looking to start securing it.

An architecture pattern for safely importing data into a system from an external source.

Check that you’re talking to a genuine NCSC employee, and not a criminal.

This guidance describes a set of technical security outcomes that are considered to represent appropriate measures under the GDPR.

How to implement a secure end-to-end data export solution

Advice and recommendations for mitigating this type of insider behaviour.

How to avoid malware sent using scam ‘missed parcel’ SMS messages, and what to do if your phone is already infected.

Two ways organisations can enable access and maintain the security benefits of zero trust even when parts of the infrastructure can’t implement the zero trust principles.

This guidance is aimed at service owners and security specialists involved in the provision of online services.

Why macros are a threat, and the approaches you can take to protect your systems.

Protecting your organisation’s telephony systems from cyber attacks and telecoms fraud.

How organisations can map their supply chain dependencies, so that risks in the supply chain can be better understood and managed.

Free online tool from the NCSC prevents cyber criminals using your email to conduct cyber attacks.

New presentation includes voiceover and insights on ransomware attack on the British Library.

Listen to all five episodes now, covering a wide range of cyber security topics.

An update on the work to make Principles Based Assurance (PBA) usable in practice.

How to design, use, and maintain secure networks.

How to ensure data cannot be recovered from electronic storage media.

Outlining the expectations for the minimum requirement for forensic visibility, to help network defenders secure organisational networks both before and after a compromise.

How to ensure your organisation’s SMS and telephone messages are effective and trustworthy.

How to get the most from penetration testing

New ‘Content Credentials’ guidance from the NSA seeks to counter the erosion of trust.

Research from the NCSC designed to eradicate vulnerability classes and make the top-level mitigations easier to implement.

A new NCSC research paper aims to reduce the presence of ‘unforgivable’ vulnerabilities.

We thank participants and look forward to sharing what we’ve learned

Passkeys are the future of authentication, offering enhanced security and convenience over passwords, but widespread adoption faces challenges that the NCSC is working to resolve.

The merits of choosing passkeys over passwords to help keep your online accounts more secure, and explaining how the technology promises to do this

The ‘NCSC for Startups’ alumnus giving identity verification the ‘Trust Stamp’

Using the Cloud Security Principles to evaluate the suitability of a cloud service.