Risk management
How to understand and manage the cyber security risks for your organisation.
Cyber security advice for industry experts & professionals
Access advanced guidance, technical insights, and expert resources from the NCSC—designed to support cyber security professionals in protecting systems, networks, and national infrastructure.
Getting started
The NCSC’s guidance helps UK government departments, agencies, the critical national infrastructure and its supply chains protect their information and systems. It also has relevance for local government and the wider public sector.
Our guidance provides an authoritative set of technical documents on the tools and techniques which underpin cyber security. There's advice on everything from securing end user devices to the design and implementation of identity management systems.
For professionals interested in working with the public sector, there's also a great deal of useful information on the standards and approaches we believe work best.
Managing cyber risk
To help manage cyber security risks at both organisational and cross-government level, effective risk management and cyber security approaches are needed to ensure that technology systems and services are appropriately protected.
Vulnerability management
Advice, guidance and other resources for managing vulnerabilities.
Supply chain
Understanding the cyber security risks from suppliers and other third parties .
Protecting bulk personal data
Fifteen best-practice measures to protect digital bulk data.
AI and cyber security: what you need to know
Understanding the risks - and benefits - of using AI tools.
Device security guidance
Guidance for organisations on how to choose, configure and use devices securely.
Reporting an incident
If you have experienced a cyber incident – and you aren't sure which organisations to contact – the UK government signposting service can help.
Protect against cyber attacks
Measures for organisations to put in place that can reduce the likelihood of cyber attacks.
Multi-factor authentication for your corporate online services
Advice on implementing strong methods of MFA for accessing corporate online services.
Phishing attacks: defending your organisation
How to defend your organisation from email phishing attacks.
Password administration for system owners
Password strategies that can help your organisation remain secure.
Cloud security guidance
How to choose, configure and use cloud services securely.
Find a product or service
We assure cyber security products and services against our rigorous standards so that you can rely on them.
Detect cyber security events
Monitoring systems, networks and services to prevent cyber security events becoming incidents.
Early Warning
Free malicious activity notifications from the NCSC for UK organisations.
Guidance
Logging and monitoring
Design your systems to be able to detect and investigate incidents.
Guidance
Building a Security Operations Centre (SOC)
Designing a security monitoring capability proportionate to the threats faced (and resources available).
Respond & recover
Resources for individuals and organisations in the UK who have experienced an online scam or cyber attack.
Minimise the impact of cyber security incidents
Assessing and quickly containing incidents, enabling rapid response at scale.
Incident management
How to effectively detect, respond to and resolve cyber incidents.
Exercise in a Box
A free resource to help organisations rehearse their response to cyber attacks.
Respond to a cyber attack overview
Resources for individuals and organisations who have experienced a cyber attack.
Mitigating malware and ransomware attacks
How to defend organisations against malware or ransomware attacks.
There are a number of NCSC assured Cyber Incident Response (CIR) companies that can help you deal with a cyber incident. These companies can help by determining the extent of the incident, managing its immediate impact, and increasing network security.
Cyber Incident Response
Members of this scheme offer NCSC assured Cyber Incident Response services to a wide range of organisations.
Find an assured Cyber Incident Response provider
There are two levels of NCSC Assured Cyber Incident Response that can help organisations recover from an incident. NCSC Assured Service Providers operating at the technical standard required for CIR Enhanced Level will also be technically competent in providing the incident response services required by CIR Standard Level. If unsure of which level to select, see Information for buyers section.
Work in critical national infrastructure?
The Cyber Assessment Framework is set of resources for operators of essential services, digital service providers and critical suppliers to manage and assess their cyber risk against the most advanced threats.
Develop the right cyber security skills, knowledge and culture
Looking beyond technical expertise to create and promote a positive cyber security culture.
Looking for something else?
Browse or search our guidance for cyber security professionals.
