Advice and guidance

1 Go to resource

Responding to a cyber incident -a guide for CEOs

This guidance helps CEOs in public and private sector organisations manage a cyber incident. It sets out aspects to consider at the start of an incident and throughout it.

Related resources

The Cyber Assessment Framework (CAF) / NCSC CAF Guidance

Guidance for organisations delivering essential services to assess and improve cyber security.

Passwords & Two-Step Verification

This guide explains how to create strong, unique passwords (for example using three random words) and why you should never reuse passwords across accounts. It also introduces Two‑Step Verification (2SV) – also called Two‑Factor Authentication (2FA) – as a vital […]

Scottish Cyber Coordination Centre – Vulnerability Coordination: Policy and Procedure

Policy for alerting and coordinating responses to new cyber vulnerabilities affecting Scottish public sector organisations.

Guidance on effective communications in a cyber incident

Supporting organisations of all sizes to manage their communications strategy before, during and after a cyber security incident.

Guide to Phishing, Smishing and Vishing Scams

This guide explains how scammers use email, texts, and phone calls to steal personal or financial information. It highlights common tactics, warning signs and practical steps to protect yourself, helping readers recognise and respond to these everyday cyber threats.

Small & Medium Sized Organisations

Cyber security advice for businesses, charities, clubs and schools with up to 250 employees. You’re likely to fall into this category if you do not have a dedicated team internally to manage your cyber security.