Resources

Implementing OWASP ASVS controls across application tiers OWASP ASVS (Application Security Verification Standard) is a list of[…]

Implementing software supply chain assurance controls for technical teams Software supply chain assurance is about proving that[…]

Retaining evidence and logs for investigations: a practical guide for UK SMEs When something goes wrong, the[…]

Evidence requirements for NHS DSPT submissions: a practical guide for UK SMEs If your business handles NHS[…]

Preparing your organisation for security incidents When a security incident happens, the biggest cost is often not[…]

Managing third-party model risk and AI dependencies For many UK SMEs, the fastest route to using AI[…]

PCI DSS explained for small merchants: a practical guide for UK SMEs If your business takes card[…]

Third-party cyber risk assessments for SMEs: a practical guide for UK businesses For many small and medium-sized[…]

GDPR principles explained for SMEs If you run a small business, the GDPR can feel like a[…]

Internal audits under ISO 27001: what SMEs should test For many small businesses, an internal audit can[…]