NCSC Feed

NCSC Technical Director Dr Ian Levy explains how the security analysis behind the DCMS supply chain review will ensure the UK’s telecoms networks are secure – regardless of the vendors used.

Ian Levy, the NCSC’s departing Technical Director, discusses life, the universe, and everything.

The NCSC's technical director outlines the challenges that TLS 1.3 presents for enterprise security.

Why established cyber security principles are still important when developing or implementing machine learning models.

...or 'Why do people leave sensitive data in unprotected AWS S3 buckets?'

Applying patches may be a basic security principle, but that doesn't mean it's always easy to do in practice.

Join the Industrial Control System Community of Interest (ICS COI), and help build CNI expertise across the UK.

By exploiting cloud services, organisations no longer have to choose between ‘more security’ and ‘better usability’.

Why the NCSC decided to advise against this long-established security guideline.

Whilst not a password panacea, using 'three random words' is still better than enforcing arbitrary complexity requirements.

Chris Ensor highlights some important elements of the NCSC's new Technology Assurance strategy.

Latest version of the CAF focusses on clarification and consistency between areas of the CAF.

Reflecting on the positive impact of the Vulnerability Reporting Service – and introducing something new for selected contributors.

The NCSC now uses 'allow list' and 'deny list' in place of 'whitelist' and 'blacklist'. Emma W explains why...

Why organisations should avoid ‘blame and fear’, and instead use technical measures to manage the threat from phishing.

ThinkCyber's CEO Tim Ward reflects on the challenges that startups face when developing innovative products.

Questions to ask your suppliers that will help you gain confidence in their cyber security.

Worked examples for Operational Technology and Virtualised systems, using the NCSC’s secure design principles

New guidance to help organisations manage rogue devices and services within the enterprise.

Download the NCSC’s point-of-sale leaflet explaining how new PSTI regulation affects consumers and retailers.