Security for Industrial Control Systems
Working with industry and academia, CPNI and CESG have developed a framework and...
Provisioning and securing security certificates
Certificates are an important part of providing encryption services. They are used to...
Acquiring, managing, and disposing of network devices
Keeping a network protected against cyber attack can appear daunting. This guidance suggests some simple...
Design Principles: Designing to avoid disruption
1. Implement denial of service protections as far upstream as possible Denial of service protections...
Digital Services: Understanding your service
Before you can design a secure digital service it's important to understand a...
Design Principles: Introduction
Digital services provide us with quick, convenient access to a whole range of...
Design Principles: Making compromise easy to detect
1. Ensure that all relevant security events and logs are collected for analysis. Having the...
Design Principles: Making services hard to compromise
1. Validate or transform all external input before processing it. Simple data formats...
Protecting Bulk Personal Data
15 good practice measures for the protection of bulk data held by digital...
Design Principles: Reducing the impact of compromise
1. Build your service using a segmented approach. A system which requires multiple...

