A practical cybersecurity checklist for UK organisations
A prioritised starting checklist covering accounts, devices, email, backups and response planning for UK businesses.
Read the guide →Knowledge centre
Cybersecurity guides for a practical next step.
Original educational explainers for UK organisations. For current certification and official requirements, check the linked NCSC, government and vendor sources.
Cybersecurity fundamentals
Phishing and email security
Reducing the risk of business email compromise
Practical steps UK organisations can use to reduce impersonation, mailbox compromise and payment-diversion exposure.
Read the guide →Microsoft 365 and cloud security
Microsoft 365 security: controls worth reviewing
A practical review guide for identity, permissions, email, devices and recovery in Microsoft 365 environments.
Read the guide →Ransomware and recovery
Ransomware preparedness: prevention and recovery priorities
How to combine protective controls, incident preparation and tested recovery plans without assuming attacks can always be prevented.
Read the guide →Endpoint and network security
Endpoint security explained for business decision-makers
Understand endpoint protection, EDR, device ownership and response planning for laptops, desktops and servers.
Read the guide →Supplier and third-party risk
How to review cybersecurity risks in your supply chain
A proportionate approach to understanding supplier access, service dependencies and security assurance requests.
Read the guide →Identity and access management
Multi-factor authentication: where to begin
Practical guidance on prioritising MFA for business email, administrator accounts and cloud services.
Read the guide →Cybersecurity for SMEs
Building a practical cybersecurity roadmap
Turn an initial security review into an owned and proportionate sequence of cybersecurity improvements.
Read the guide →Data protection and compliance
Cyber Essentials: what UK organisations should understand
A plain-language introduction to Cyber Essentials and why it is not a substitute for wider cybersecurity management.
Read the guide →Cybersecurity technology guides
Choosing a managed security service: questions to ask
Questions for UK organisations comparing managed security, monitoring, alert escalation and operational responsibilities.
Read the guide →