UK National Cyber Security Centre

A guide to choosing the right EASM product for your organisation, and the security features you need to consider.

How to choose an external attack surface management (EASM) tool that’s right for your organisation.

The NCSC co-signs Ministerial letter to major British businesses including FTSE 350 companies.

…or ‘Why do people leave sensitive data in unprotected AWS S3 buckets?’

How organisations can avoid staff burnout during an extended period of heightened cyber threat.

How to defend your organisation from email phishing attacks.

Why you should act now to ensure you meet the new hardware standards, and prioritise security.

How organisations can improve their ability to both detect and discover cyber threats.

The NCSC’s contribution to the Internet Engineering Task Force will help to make the internet more secure.

Security questions to ask your IT service providers when considering a digital transition

Guidance for staff responsible for managing a cyber incident response within their organisation.

If you can’t see your entire operational technology environment, you can’t defend it. New guidance from the NCSC will help you gain that visibility.

How to protect sensitive information about your setting and the children in your care from accidental damage and online criminals.

How to erase the personal data from your phone, tablets, and other devices (and why it’s important when you’re buying and selling them).

Why planning and rehearsing your recovery from an incident is as vital as building your defences

Exploring how far cyber security approaches can help mitigate risks in generative AI systems

Use privacy settings across social media platforms to manage your digital footprint.

Why sharing lessons learned from cyber security incidents and ‘near misses’ will help everyone to improve

Eleanor Fairford, Deputy Director of Incident Management at the NCSC, and Mihaela Jembei, Director of Regulatory Cyber at the Information Commissioner’s Office (ICO), reflect on why it’s so concerning when cyber attacks go unreported – and look at some of the misconceptions about how organisations respond to them.

Guidance for enterprise administrators who want to reduce the likelihood of being held to ransom by WannaCry (or other types of ransomware).

How to defend organisations against malware or ransomware attacks.

Managing the cyber security of high profile events in the real and virtual worlds.

Updates to the CAF helps providers of essential services to better manage their cyber risks.

When organisations might face a greater threat, and the steps to take to improve security.

Detect and prevent malicious software and viruses on your computer or laptop.

The year four report covers 2020 and aims to highlight the achievements and efforts made by the Active Cyber Defence programme.

The year three report covers 2019 and aims to highlight the achievements and efforts made by the Active Cyber Defence programe.

A joint blog post by the NCSC’s National Resilience Director, Jonathon Ellison, and Chief Technology Officer, Ollie Whitehouse.

Listen to all five episodes now, covering a wide range of cyber security topics.

Calling cyber security professionals, culture specialists and leaders to drive uptake of new Cyber security culture principles.