NCSC updates 10 Steps to Cyber Security

The National Cyber Security Centre (NCSC) has revised its Cyber Security guidance titled “10 Step to Cyber Security”.

Originally issued in 2012 the guidance has been updated ahead of its tenth anniversary. Security risks change constantly and this revision is needed to address such changes as the move to Cloud, home working and rise of ransomware.

10 Steps is a useful framework, but it’s not always easy to apply such frameworks to your own business so you reap the benefits. NCSC has clarified the guidance is aimed at “security professionals and technical staff within medium to large organisations”.

However, it can be used in conjunction with their Cyber Security Toolkit for Boards. This is intended for decision-makers who are not technical but need to have good quality discussions with technical experts. The emphasis is not just on risk management but on enabling progress and competitive advantage.

NCSC also publish guidance for small businesses, self-employed and sole traders.