Critical processes and services

Use the Blueprint for Secure Cloud to design, configure and deploy secure cloud and hybrid services.

Build secure and more resilient systems using modern defensible architecture. Apply key design foundations to help prevent, detect, and respond to cyber threats.

Secure your AI systems from design to deployment with practical guidance on how to reduce risks, protect data, and build trust.

Learn how to release software updates safely by following secure practices to reduce risks, prevent disruptions and build customer trust.

Learn the six Secure by Design foundations for building, procuring and maintaining secure digital products and services.

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Learn how to find and respond to Active Directory compromises by identifying suspicious activity and using controls to limit attacker access.

Learn how to effectively restrict administrative privileges to reduce the risk of unauthorised access, system compromise and malicious activity.

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Protect administrator accounts and critical systems by using secure administration practices to lower cyber security risks.

Learn how to use PowerShell securely to reduce risk, improve monitoring, and promote responsible use.

Improve software supply chain visibility with a Software Bills of Materials (SBOMs) to identify dependencies and better manage cyber security risks.

Learn how to select secure and verifiable technologies that reduce cyber risks and help build reliable systems.

Use application controls to prevent unauthorised software from running and so reduce the risk of malware infecting your system.

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Learn how to securely use cloud services by understanding your responsibilities and managing cloud security risks.

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

This interactive guide is here to assist you with taking all of the appropriate steps to prepare for, respond to and recover from a ransomware incident.

Learn how to find and respond to Active Directory compromises by identifying suspicious activity and using controls to limit attacker access.

Improve your organisation’s account security by implementing multi-factor authentication to reduce the risk of unauthorised access.

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Protect administrator accounts and critical systems by using secure administration practices to lower cyber security risks.

Improve software supply chain visibility with a Software Bills of Materials (SBOMs) to identify dependencies and better manage cyber security risks.

Learn how to select secure and verifiable technologies that reduce cyber risks and help build reliable systems.

Learn how to manage cyber supply chain risks by setting clear security rules, checking suppliers and monitoring third-party services.

Learn to identify cyber supply chain risks by understanding your systems, checking your suppliers, and spotting weak points across your services.

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Learn how to release software updates safely by following secure practices to reduce risks, prevent disruptions and build customer trust.

Improve threat detection and incident response by implementing effective event logging and monitoring practices.

Use network devices that log and monitor activity to support investigation, detection and response to cyber incidents.

Learn how to plan, implement and maintain SIEM and SOAR platforms to improve threat detection, incident response and cyber security monitoring.

Learn how to prioritise key event logs to improve threat detection, investigations and incident response.

Improve visibility of system activity by implementing Windows Event Logging and Centralised Forwarding.

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.

Improve threat detection and incident response by implementing effective event logging and monitoring practices.

Learn how to plan, implement and maintain SIEM and SOAR platforms to improve threat detection, incident response and cyber security monitoring.

Learn how to prioritise key event logs to improve threat detection, investigations and incident response.

The Information security manual is a cyber security framework organisations can use to protect information and operational technology systems from cyber threats.