UK National Cyber Security Centre Guidance

Activities which organisations must carry out to migrate safely to post-quantum cryptography in the coming years.

Recommended authentication models for organisations looking to move ‘beyond passwords’.

Helps vendors measure how well they meet the Software Security Code of Practice, and suggests remedial actions should they fall short.

How to retire digital assets (such as data, software, or hardware) from operation.

How to protect yourself from the impact of data breaches

Guidance for home users or small businesses who want to reduce the likelihood of being held to ransom by WannaCry (or other types of ransomware).

Guidance for enterprise administrators who want to reduce the likelihood of being held to ransom by WannaCry (or other types of ransomware).

Laying the groundwork for incident readiness.

Assessing the cyber security needs of major events.

How to defend organisations against malware or ransomware attacks.

Advice on the selection and deployment of Protective Domain Name Systems (DNS).

Two ways organisations can enable access and maintain the security benefits of zero trust even when parts of the infrastructure can’t implement the zero trust principles.

Detect and prevent malicious software and viruses on your computer or laptop.

Advice on the choice, implementation and use of automated vulnerability scanning tools for organisations of all sizes.

How to set up and use video conferencing services, such as Zoom and Skype, safely and securely

Guidance to help you to choose, configure and deploy video conferencing services such as Zoom and Skype within your organisation

Guidance for organisations wishing to deploy products that use IPsec.

Recommended profiles to securely configure TLS for the most common versions and scenarios, with additional guidance for managing older versions.

This guidance is aimed at service owners and security specialists involved in the provision of online services.

How to protect your brand from being exploited online.