NCSC Feed

In our third blog about migrating to a zero trust architecture, we consider the security properties of an Always On VPN, and the factors to consider when deciding if you no longer need one.

How organisations working in high-risk countries can improve their cyber resilience.

Andrew Roughan, CEO of the NCSC’s innovation partner Plexal, explains why a whole-of-society approach is vital for cyber security innovation.

New report outlines the growing threat that charities face, and how they can become resilient to cyber attacks.

Security questions to ask your IT service providers during the coronavirus lockdown

Andrew A explains what you must check before giving Managed Service Providers (MSPs) the keys to your kingdom.

Useful tips and resources for people using personal IT to work from home.

Why organisations should avoid ‘blame and fear’, and instead use technical measures to manage the threat from phishing.

Advice on the selection and deployment of Protective Domain Name Systems (DNS).

Richard C explains how an understanding of vulnerabilities - and their exploitation - informs how the NCSC assesses the security of computer systems.

An update on the work to make Principles Based Assurance (PBA) usable in practice.

Explaining the forthcoming NCSC Technology Assurance Principles.

Vicky Brock of Vistalworks describes how the 'NCSC For Startups' programme has helped her organisation develop solutions to tackle illicit online trade.

Ian Levy, the NCSC’s departing Technical Director, discusses life, the universe, and everything.

Implementing asset management for good cyber security.

Anne W takes stock of where we are following the changes to Cyber Essentials in early 2022, discussing some of the feedback received and clarifying some common misconceptions.

Sara Ward, the CEO of Black Country Women's Aid, discusses her organisation's experience of gaining Cyber Essentials Plus certification.

Saj Huq of Plexal explains why collaboration with the NCSC brings opportunities to the cyber security sector.

Chris Wallis, CEO of Intruder, explains how completing the NCSC's Startup Programme was a turning point for his organisation.

Recommended authentication models for organisations looking to move 'beyond passwords'.