Digital Services: Designing a secure digital service
Good design should: Make services hard to compromise Designing with security in mind…
Entries by
Digital Services: Operating a secure digital service
To remain secure a digital service needs to be well operated and maintained….
Bulk Data: 1-3 What are you protecting?
1. You have a well-defined catalogue of the data your service holds. You…
Bulk Data: 8-15 How is your system designed, implemented and operated?
8. No known vulnerable surfaces are exposed at the edges of your service….
Design Principles: Understanding your service
1. Understand your service and the data you will need to operate it….
Design Principles: Reducing the impact of compromise
1. Build your service using a segmented approach. A system which requires multiple…
End User Devices: Advice for End Users
This advice will need to be tailored to the particular device(s) being used,…
Vulnerability management
All modern software contains vulnerabilities; either software defects that require patches to remedy, or…
Security operations centre (SOC) buyers guide
This guidance is for organisations that are considering procuring a Security Operations Centre (SOC) from…
Using IPsec to protect data
This guide will help you deploy or buy network encryption, using IPsec. It provides recommendations for the…