Author: Steve Tyler

Common Cyber Attacks: Reducing the Impact Article Date: 2022-03-10T09:10:16+00:00 Summary Common Cyber Attacks: Reducing The Impact explains what typical cyber attacks look like and why every organisation should put basic security controls and processes in place. It’s a concise companion to the NCSC’s 10 Steps to Cyber Security and focuses on practical, affordable defences rather […]

Using MSPs to administer your cloud services Summary The NCSC explains the security trade-offs when organisations outsource cloud administration to Managed Service Providers (MSPs). While MSPs bring expertise, scale and operational efficiencies, delegating administrative access increases your attack surface because MSP systems and credentials can be attractive targets for attackers. The guidance recommends treating MSPs […]

To SOC or not to SOC ? Summary This NCSC blog explores whether teams launching digital services truly need a traditional Security Operations Centre (SOC) or whether cloud-native design and operational changes can reduce or replace that need. It explains how SOCs work, why they were historically mandated (GPG13), and how the move to cloud […]

Zero Trust migration: where do I start? Summary This NCSC blog explains practical first steps for migrating to a zero trust architecture. It assumes you have already decided zero trust fits your business goals and covers how to begin: discovery (inventory of users, devices, services and data), identity consolidation and multi-factor authentication, device management and […]