UK National Cyber Security Centre

How to make sure your organisation is prepared for home working.

How to protect yourself from the impact of data breaches

Advice in response to the increase in sextortion scams

Some tips on good diagram drafting and pitfalls to avoid when trying to understand a system in order to secure it.

How to defend organisations against malware or ransomware attacks.

An update on the NCSC’s trials to test the real-world efficacy of cyber deception solutions.

Tips to help you purchase items safely and avoid fraudulent websites.

Advice for those concerned a device has been infected.

A step by step guide to recovering online accounts.

How to protect sensitive information about your setting and the children in your care from accidental damage and online criminals.

Check that you’re talking to a genuine NCSC employee, and not a criminal.

Guidance for organisations wishing to deploy products that use IPsec.

There are crucial differences between prompt and SQL injection which – if not considered – can undermine mitigations.

Recommended profiles to securely configure TLS for the most common versions and scenarios, with additional guidance for managing older versions.

Research from the NCSC designed to eradicate vulnerability classes and make the top-level mitigations easier to implement.

How service owners should securely provision and manage certificates in the Web PKI.

The NCSC has updated 3 key pieces of cryptographic guidance. Here, we explain the changes.

Joint NCSC and Canadian Centre for Cyber Security primer helps organisations understand emerging technologies that can help maintain trust in their public-facing information.

Calling vulnerability researchers, exploit developers and others in the offensive cyber industry to share their views.

The NCSC’s Cyber Action Toolkit helps you to protect your business from online attacks.

Why transferring the Commercial Product Assurance scheme to industry ownership marks an important milestone.

An SME’s guide to selecting and working with managed service providers.

New proposals will combat the growing threat to UK critical national infrastructure (CNI).

How the NCSC’s ‘Cyber Action Toolkit’ is helping small businesses to improve their cyber security.

By 31 March 2026, organisations should have alternatives to Mail Check and Web Check in place.

A guide to choosing the right EASM product for your organisation, and the security features you need to consider.

How to choose an external attack surface management (EASM) tool that’s right for your organisation.

The NCSC co-signs Ministerial letter to major British businesses including FTSE 350 companies.

…or ‘Why do people leave sensitive data in unprotected AWS S3 buckets?’

How organisations can avoid staff burnout during an extended period of heightened cyber threat.