Advice and guidance

1 Go to resource

Protective DNS for the private sector

Advice on the selection and deployment of protective Domain Name Systems (DNS).

This guidance is aimed at private sector organisations who do not qualify to use the NCSC’s Protective DNS (PDNS).

Related resources

Supporting guidance for public bodies

Resources to help public sector bodies embed cyber resilience into the supply chain process.

Sextortion

Sextortion is a type of cyber-enabled extortion which involves the threat of sharing sexual information, images or clips to extort money from you, whether images actually exist or not. Police Scotland have advice on what you can do to reduce […]

Government Security

This site is the home of security strategies, standards, policies, and guidance for UK government departments and their arm’s length bodies.

Cyber Incident Response Toolkit

Cyber incident response toolkit to help organisations develop plans for responding to the threat of cyber attacks.

SIM Swap Guidance

This guide explains how criminals can hijack your mobile phone number by tricking your provider into switching your service to a SIM card under their control. Once they have your number, they can intercept calls and texts – including the […]

Passwords & Two-Step Verification

This guide explains how to create strong, unique passwords (for example using three random words) and why you should never reuse passwords across accounts. It also introduces Two‑Step Verification (2SV) – also called Two‑Factor Authentication (2FA) – as a vital […]