NCSC Feed

Two ways organisations can enable access and maintain the security benefits of zero trust even when parts of the infrastructure can't implement the zero trust principles.

In our third blog about migrating to a zero trust architecture, we consider the security properties of an Always On VPN, and the factors to consider when deciding if you no longer need one.

How organisations working in high-risk countries can improve their cyber resilience.

Andrew Roughan, CEO of the NCSC’s innovation partner Plexal, explains why a whole-of-society approach is vital for cyber security innovation.

New report outlines the growing threat that charities face, and how they can become resilient to cyber attacks.

Andrew A explains what you must check before giving Managed Service Providers (MSPs) the keys to your kingdom.

Advice on the selection and deployment of Protective Domain Name Systems (DNS).

Richard C explains how an understanding of vulnerabilities - and their exploitation - informs how the NCSC assesses the security of computer systems.

An update on the work to make Principles Based Assurance (PBA) usable in practice.

Explaining the forthcoming NCSC Technology Assurance Principles.

Vicky Brock of Vistalworks describes how the 'NCSC For Startups' programme has helped her organisation develop solutions to tackle illicit online trade.

Ian Levy, the NCSC’s departing Technical Director, discusses life, the universe, and everything.

Implementing asset management for good cyber security.

Anne W takes stock of where we are following the changes to Cyber Essentials in early 2022, discussing some of the feedback received and clarifying some common misconceptions.

Sara Ward, the CEO of Black Country Women's Aid, discusses her organisation's experience of gaining Cyber Essentials Plus certification.

Saj Huq of Plexal explains why collaboration with the NCSC brings opportunities to the cyber security sector.

Chris Wallis, CEO of Intruder, explains how completing the NCSC's Startup Programme was a turning point for his organisation.

Recommended authentication models for organisations looking to move 'beyond passwords'.

New guidance to protect your brand from being exploited online, and to help you choose alternate authentication models.

How to protect your brand from being exploited online.