Insights
Insights
Practical guidance on UK government and regulated cyber security - GovAssure, the NCSC CAF, Secure by Design, NIS2 and OT/IoT - written to be useful, not to sell.
Notes from the field
Straight, current thinking on the frameworks and regulations our clients are working through.
Preparing for GovAssure: a practical guide to the NCSC CAF
GovAssure applies the NCSC Cyber Assessment Framework to central government. Here is how to scope it, assess honestly and survive independent review.
Read the articleDoes NIS2 apply to UK organisations?
NIS2 is an EU directive, but plenty of UK organisations still fall within its reach. Here is who is affected, and how it sits alongside the UK’s own regime.
Read the articleSecure by Design in practice, not on paper
The UK government’s Secure by Design is meant to shape decisions, not be a form completed near go-live. Here is what doing it properly looks like.
Read the article