UK National Cyber Security Centre Guidance

Managing the cyber security of high profile events in the real and virtual worlds.

Implementing asset management for good cyber security.

Guidance for organisations that use, own, or operate an online service who are looking to start securing it.

An architecture pattern for safely importing data into a system from an external source.

The following tips can help organisations create their own cyber incident response exercises.

Check that you’re talking to a genuine NCSC employee, and not a criminal.

This guidance describes a set of technical security outcomes that are considered to represent appropriate measures under the GDPR.

How to implement a secure end-to-end data export solution

How to protect sensitive information about your setting and the children in your care from accidental damage and online criminals.

A brief guide to MIKEY-SAKKE, a protocol that allows organisations to provide secure communications with end-to-end encryption.

Advice and recommendations for mitigating this type of insider behaviour.

How to avoid malware sent using scam ‘missed parcel’ SMS messages, and what to do if your phone is already infected.

Two ways organisations can enable access and maintain the security benefits of zero trust even when parts of the infrastructure can’t implement the zero trust principles.

This guidance is aimed at service owners and security specialists involved in the provision of online services.

Why macros are a threat, and the approaches you can take to protect your systems.

How to ensure your organisation’s SMS and telephone messages are effective and trustworthy.

How to design, use, and maintain secure networks.

Outlining the expectations for the minimum requirement for forensic visibility, to help network defenders secure organisational networks both before and after a compromise.

How to ensure data cannot be recovered from electronic storage media.

How to get the most from penetration testing