UK cyber security

A practical checklist for writing a vulnerability disclosure policy: what to include, what UK product security law now requires, and how it differs from a bug bounty programme or a …

Cyber Essentials does not require a penetration test, and CE+ uses vulnerability scanning rather than adversarial testing. A side-by-side guide to what each certification covers, what it misses, and when …

The UK government has introduced a historic UK ransomware ban targeting public sector organisations and critical infrastructure operators. This groundbreaking legislation marks the first comprehensive attempt to disrupt cybercriminal business …