Resources

Zero Trust explained for non-technical leaders: what it means for UK SMEs For many UK SMEs, the[…]

Mapping ISO 27001 Annex A controls to NIST 800-53 For many UK SMEs, ISO/IEC 27001 and NIST[…]

How third-party software introduces cyber risk for UK SMEs Third-party software can save time, reduce development effort,[…]

Credential attack simulation using BloodHound: a practical guide for technical practitioners Credential attack simulation using BloodHound is[…]

Common identity-based attacks explained for SMEs For many small and medium-sized businesses, the biggest cyber risk is[…]

Continuous improvement loops in security operations: a practical guide for technical teams Security operations improve fastest when[…]

UK Secure Software Code of Connection explained for suppliers If you supply software or digital services into[…]

What a data protection impact assessment is and why it matters A data protection impact assessment is[…]

Mapping detections and controls to MITRE ATT&CK: a practical guide for technical teams MITRE ATT&CK is useful[…]

Securing AI pipelines against data poisoning: a practical guide for technical teams Data poisoning is one of[…]