Plan & Build
Consider security early when seeking investment to protect your company and help you prepare for the National Security and Investment Act
Data centres operators and their customers should both have individual risk management strategies designed to protect their critical assets and systems.
International collaboration is the cornerstone of the research and innovation sector in the UK. This guidance is designed for senior University leaders to have the key issues and questions at their fingertips.
Guidance to provide high level, practical advice to anyone looking to formulate a Site Security Plan, assisting in developing a proportionate plan which aims to mitigate Terrorist and State threats, whilst supporting in countering many other types of security or safety threats.
Passport to Good Security - Build it Secure: poor or insufficient attention to security at the design and build stage can pose significant risks once the build is completed and operational.
Security-Mindedness is about encouraging business leaders, managers and practitioners to consider security across all areas of your organisations
Passport to Good Security - Protect Your Information: a loss of data can cause organisation significant harm across every level, from loss of capital and reputation to a loss of staff confidence and well-being.
NPSA undertake a number of functional evaluation schemes for automated access control products
Perimeter Intrusion Detection Systems is a generic term which covers a wide range of technologies designed to provide advance warning of an intruder gaining access to a secure area
10 important steps organisations can take to enhance physical security measure to mitigate state threats
Operate & Detect
This guidance is for users of shared workspaces and provides practical advice tailored to your workspace and activities
This guidance is designed to help companies develop a travel security policy to help overcome the main security challenges presented when working or travelling overseas
Scenarios to help illustrate the security threats and how to protect your business from them
Guidance to help companies conduct basic background checks which can enable you to make more informed decisions on prospective partners
Data centres operators and their customers should both have individual risk management strategies designed to protect their critical assets and systems.
Aimed at academics who are involved in international research collaborations, this provides advice and guidance on some of the main challenges presented when working or travelling overseas.
Guidance for those responsible for planning the movement of sensitive items on the need for protective security during transportation
Passport to Good Security - Sharing of Information: sharing information inappropriately can pose a significant risk to your organisation, leaving it vulnerable to theft, loss of data or improper use of information.
Sensitive information and assets, whatever their form, must be appropriately protected from creation through to verified destruction.
Tamper indicating equipment can be used to provide physical evidence of unauthorised access to a secure area or object.
Updated guidance on Intrusion Detections Systems (IDS) is now available. IDS are sited within a building and offer out of hours protection when the building or buildings are locked at night
The Think before You Link campaign, on which the TBYL App is based, can help keep you, your colleagues, and the country safe from being targeted by malicious profiles online
Have you ever encountered someone online who was not who they seemed? In the digital age, online social and professional networking sites are enabling us to be more joined up than ever, but also expose us to unforeseen risks
Closed-Circuit Television (CCTV) is a system in which images are monitored and recorded for surveillance and security purposes. NPSA have updated the page to include a new Introduction to CCTV video
Response & Review
The destruction of sensitive items should be undertaken via a secure process. This section provides those responsible for information assurance and physical security with best practice guidance
Data centres operators and their customers should both have individual risk management strategies designed to protect their critical assets and systems
Complete Guidance
This guidance is designed to help workspace providers provide the safety and collaboration that your users seek.
Short videos designed for academics, based on real events in UK academia to help improve awareness of research security risks and how to mitigate them.
Short videos designed for academics, based on real events in UK academia to help improve awareness of research security risks and how to mitigate them.
The core security measures suggested below will help early-stage technology businesses protect their IP, information, and data
Competition to succeed in emerging technology can be intense. This guidance is for founders or CEOs of innovative startups, and will help you to protect your technology and reputation.
This guidance is for early-stage investors in emerging technology companies.
Guidance for data centre owners and users. You should use this guidance to inform your own risk management strategy that is unique to your organisation’s needs
Data centres operators and their customers should both have individual risk management strategies designed to protect their critical assets and systems
Trusted Research aims to support the integrity of the system of international research collaboration, which is vital to the continued success of the UK’s research and innovation sector
This guidance allows universities to safely encourage individuals to visit and contribute to research while still following good research security practice
Foreign governments could use their intelligence services and their economic power to target your research. Secure your success
Short videos designed for academics, based on real events in UK academia to help improve awareness of research security risks and how to mitigate them.
The UK’s thriving science and technology sector is at risk of being compromised by certain states for their technological, economic, political, and military gain. Secure your success
UK technology companies are at risk of being compromised by certain states for their technological, economic, political, and military gain. Secure your success
Being part of the UK's Critical National Infrastructure makes you, your colleagues, and your organisation highly attractive targets to certain states. Secure your success
Critical and emerging technology companies are at risk of being compromised by certain states for their technological, economic, political, and military gain. Secure your success
If implemented early enough, mitigations will be a necessary part of risk management when doing business with overseas parties.
NPSA and the NCSC’s new Secure Innovation Action Plan will provide you with tailored guidance to help you take the next steps on your security journey


