National Cyber Security Centre

Cover of Supplier cyber security assurance questionnaire and review guide

QuestionnaireXLSX

Supplier cyber security assurance questionnaire and review guide

15 pages

Risk and assurance Security questionnaires

Cover of Cyber disruption response and recovery guide

Assessment GuideDOCX

Cyber disruption response and recovery guide

17 pages

Business continuity Continuity and response

Cover of Cyber resilience assessment guide and worksheet

Assessment GuideDOCX

Cyber resilience assessment guide and worksheet

38 pages

Authentication Backup and recovery

Cover of Acquiring, managing, and disposing of network devices

Reference GuideDOCX

Acquiring, managing, and disposing of network devices

5 pages

Asset management Retention and deletion

Cover of Actions to take when the cyber threat is heightened

Reference GuideDOCX

Actions to take when the cyber threat is heightened

4 pages

Security operations

Cover of AI and cyber security: what you need to know

Reference GuideDOCX

AI and cyber security: what you need to know

5 pages

Cover of Application Development Guidance: Introduction

Reference GuideDOCX

Application Development Guidance: Introduction

4 pages

Cryptography and keys Secure development

Cover of Approaching enterprise technology with cyber security in mind

Reference GuideDOCX

Approaching enterprise technology with cyber security in mind

4 pages

Security operations

Cover of Asset management

Reference GuideDOCX

Asset management

6 pages

Asset management

Cover of Authentication methods: choosing the right type

Reference GuideDOCX

Authentication methods: choosing the right type

8 pages

Authentication Identity management

Cover of Building and operating a secure online service

Reference GuideDOCX

Building and operating a secure online service

9 pages

Incident response Logging and monitoring

Cover of Buying, selling and donating second-hand devices

Reference GuideDOCX

Buying, selling and donating second-hand devices

4 pages

Privacy management

Cover of Choosing a managed service provider (MSP)

Reference GuideDOCX

Choosing a managed service provider (MSP)

7 pages

Incident response

Cover of Cyber Security Toolkit for Boards

Reference GuideDOCX

Cyber Security Toolkit for Boards

7 pages

ISMS governance

Cover of Cyber insurance guidance

Reference GuideDOCX

Cyber insurance guidance

5 pages

Incident response

Reference GuideDOCX

Cyber security for high profile conferences

6 pages

Cloud security Privileged access

Cover of Cyber security for major events

Reference GuideDOCX

Cyber security for major events

6 pages

Incident response Risk assessment

Cover of Decommissioning assets

Reference GuideDOCX

Decommissioning assets

4 pages

Backup and recovery

Cover of Design Pattern: Safely Exporting Data

Reference GuideDOCX

Design Pattern: Safely Exporting Data

7 pages

Cover of Effective steps to cyber exercise creation

Reference GuideDOCX

Effective steps to cyber exercise creation

5 pages

Incident response

Cover of External attack surface management (EASM) buyer's guide

Reference GuideDOCX

External attack surface management (EASM) buyer's guide

7 pages

Vulnerability management

Cover of GDPR security outcomes

Reference GuideDOCX

GDPR security outcomes

7 pages

GDPR Access control

Cover of Impact of AI on cyber threat from now to 2027

Reference GuideDOCX

Impact of AI on cyber threat from now to 2027

5 pages

Cover of Introduction to identity and access management

Reference GuideDOCX

Introduction to identity and access management

6 pages

Identity management

Cover of Introduction to logging for security purposes

Reference GuideDOCX

Introduction to logging for security purposes

8 pages

Authentication Logging and monitoring

Cover of Macro Security for Microsoft Office

Reference GuideDOCX

Macro Security for Microsoft Office

7 pages

Security operations

Cover of Managing the risk of cloud-enabled products

Reference GuideDOCX

Managing the risk of cloud-enabled products

6 pages

Cloud security Data sharing

Cover of Mapping your supply chain

Reference GuideDOCX

Mapping your supply chain

4 pages

Cover of Mitigating malware and ransomware attacks

Reference GuideDOCX

Mitigating malware and ransomware attacks

7 pages

Incident response Security operations

Cover of NCSC advice on the use of equipment from high risk vendors in UK telecoms networks

Reference GuideDOCX

NCSC advice on the use of equipment from high risk vendors in UK telecoms networks

7 pages

Risk assessment

Cover of Network security fundamentals

Reference GuideDOCX

Network security fundamentals

7 pages

Access control Configuration management

Cover of Pattern: Safely Importing Data

Reference GuideDOCX

Pattern: Safely Importing Data

7 pages

Cover of Penetration testing

Reference GuideDOCX

Penetration testing

6 pages

Security testing

Cover of Phishing attacks: defending your organisation

Reference GuideDOCX

Phishing attacks: defending your organisation

8 pages

Authentication Incident response

Cover of Preventing Lateral Movement

Reference GuideDOCX

Preventing Lateral Movement

6 pages

Cover of Protecting SMS messages used in critical business processes

Reference GuideDOCX

Protecting SMS messages used in critical business processes

6 pages

Security operations

Cover of Protective DNS for the private sector

Reference GuideDOCX

Protective DNS for the private sector

5 pages

Data sharing Logging and monitoring

Cover of Provisioning and managing certificates in the Web PKI

Reference GuideDOCX

Provisioning and managing certificates in the Web PKI

7 pages

Cryptography and keys

Cover of Reducing data exfiltration by malicious insiders

Reference GuideDOCX

Reducing data exfiltration by malicious insiders

10 pages

Cover of Secure communications principles

Reference GuideDOCX

Secure communications principles

5 pages

Cryptography and keys Supplier risk

Cover of Secure sanitisation and disposal of storage media

Reference GuideDOCX

Secure sanitisation and disposal of storage media

5 pages

Asset management Retention and deletion

Cover of Protocol Design Principles

Reference GuideDOCX

Protocol Design Principles

13 pages

Secure development

Cover of Security architecture anti-patterns

Reference GuideDOCX

Security architecture anti-patterns

7 pages

Secure engineering

Cover of Timelines for migration to post-quantum cryptography

Reference GuideDOCX

Timelines for migration to post-quantum cryptography

10 pages

Cryptography and keys Security operations

Cover of Shadow IT security guidance

Reference GuideDOCX

Shadow IT security guidance

6 pages

Asset management

Cover of Software Security Code of Practice - Assurance Principles and Claims (APCs)

Reference GuideDOCX

Software Security Code of Practice - Assurance Principles and Claims (APCs)

5 pages

Risk and assurance Secure development

Cover of Transaction Monitoring for online services

Reference GuideDOCX

Transaction Monitoring for online services

5 pages

Logging and monitoring

Cover of Using IPsec to protect data

Reference GuideDOCX

Using IPsec to protect data

7 pages

Cryptography and keys

Cover of Using TLS to protect data

Reference GuideDOCX

Using TLS to protect data

8 pages

Cryptography and keys

Cover of Vulnerability scanning tools and services

Reference GuideDOCX

Vulnerability scanning tools and services

9 pages

Secure engineering Security operations

Cover of Zero trust architecture design principles

Reference GuideDOCX

Zero trust architecture design principles

5 pages

Cover of Understanding adversarial attacks against Machine Learning and AI

Reference GuideDOCX

Understanding adversarial attacks against Machine Learning and AI

15 pages

Cover of The near-term impact of AI on the cyber threat

Reference GuideDOCX

The near-term impact of AI on the cyber threat

5 pages

AI governance Security operations

Cover of Configuring Microsoft Outlook 365's 'Report Phishing' add-in

Reference GuideDOCX

Configuring Microsoft Outlook 365's 'Report Phishing' add-in

4 pages

Security operations

Cover of Early Years practitioners: using cyber security to protect your settings

Reference GuideDOCX

Early Years practitioners: using cyber security to protect your settings

6 pages

Authentication Security operations

Cover of Guidance on effective communications in a cyber incident

Reference GuideDOCX

Guidance on effective communications in a cyber incident

5 pages

Continuity and response Incident response

Cover of Guidance on digital forensics and protective monitoring specifications for producers of network devices and appliances

Reference GuideDOCX

Guidance on digital forensics and protective monitoring specifications for producers of network devices and appliances

5 pages

Asset management Logging and monitoring

Cover of Guidance for organisations considering payment in ransomware incidents

Reference GuideDOCX

Guidance for organisations considering payment in ransomware incidents

4 pages

Incident response

Cover of Private Branch Exchange (PBX) best practice

Reference GuideDOCX

Private Branch Exchange (PBX) best practice

5 pages

Authentication Backup and recovery

Cover of Putting staff welfare at the heart of incident response

Reference GuideDOCX

Putting staff welfare at the heart of incident response

3 pages

Continuity and response Incident response

Cover of Advanced Cryptography

Reference GuideDOCX

Advanced Cryptography

8 pages

Cryptography and keys Security operations

Cover of Next steps in preparing for post-quantum cryptography

Reference GuideDOCX

Next steps in preparing for post-quantum cryptography

6 pages

Cryptography and keys Security operations

Cover of Organisational use of Enterprise Connected Devices

Reference GuideDOCX

Organisational use of Enterprise Connected Devices

8 pages

Cover of Quantum networking technologies

Reference GuideDOCX

Quantum networking technologies

4 pages

Cryptography and keys

Cover of Ransomware, extortion and the cyber crime ecosystem

Reference GuideDOCX

Ransomware, extortion and the cyber crime ecosystem

12 pages

Incident response

Cover of Security benefits of a good cloud service

Reference GuideDOCX

Security benefits of a good cloud service

10 pages

Access control Cloud security