Cyber security
The office of tomorrow: a Cyber Essentials short film
Watch our independent newsreel-style film about AI, office habits and the five Cyber Essentials controls. With narration, captions and a full transcript.
Published Reviewed
Insights
Guidance on IT, cyber security and compliance.
Costs, requirements and decisions. Guides to planning your IT, preparing for certification and using software and AI at work.
Browse the guidesThe guide library
Choose a topic or search for a service, standard or question.
Cyber security
DCC Level 0 requirements
DCC Level 0 is three controls and six questions. What each one asks, what counts as evidence, and the two scope mistakes that fail an assessment outright.
Published Reviewed
Cyber security
DCC vs Cyber Essentials
Cyber Essentials is not an alternative to Defence Cyber Certification, it is part of it. How the two relate, and the order to do them in.
Published Reviewed
Cyber security
DEFCON 658 explained
DEFCON 658 brings the Cyber Security Model into your MOD contract and makes you flow it down to subcontractors. What it requires, and what to do first.
Published Reviewed
Cyber security
Def Stan 05-138 explained
What Defence Standard 05-138 requires, how Cyber Risk Profile levels 0 to 3 decide which controls apply to you, and how it connects to DEFCON 658 and DCC.
Published Reviewed
Governance and audit
Technology due diligence checklist (UK)
A UK technology due diligence checklist for PE deal teams and advisers: the six areas to examine and the custom-software question most reports miss.
Published Reviewed
Managed IT
Boutique vs large MSP: which is right for a regulated SME?
Boutique or large MSP for a regulated SME? How the two compare on accountability, senior access, security depth, out-of-hours cover and price.
Published Reviewed
Cyber security
How much does Cyber Essentials cost?
What Cyber Essentials and Cyber Essentials Plus really cost in the UK: the certification fee, the work to get ready, and how to keep the spend sensible.
Published Reviewed
Cyber security
Cyber Essentials Requirements
The five Cyber Essentials controls explained, and why Cyber Essentials Plus requirements are the same five controls verified differently rather than a longer list.
Published Reviewed
Cyber security
EDR vs MDR vs XDR vs SOC vs MSSP
EDR, MDR, XDR, SOC and MSSP explained: what each one does, how they differ, and which one a business of your size needs.
Published Reviewed
Software and AI
What the July 2026 Microsoft Copilot changes mean
From 1 July 2026 Microsoft bundles Copilot into Microsoft 365 Business plans and raises the standalone price. What it means for your business, and what to do.
Published Reviewed
Software and AI
How much does Microsoft Copilot cost?
Microsoft Copilot pricing after the July 2026 changes: bundled Business plans with Copilot versus the standalone licence, and how to choose what fits.
Published Reviewed
Software and AI
Is Microsoft Copilot safe for business?
Whether Microsoft Copilot is safe for business depends on your Microsoft 365 permissions and data. The risks that matter, and how to address them first.
Published Reviewed
Software and AI
Microsoft Copilot security
The Microsoft 365 controls to put in place before you switch Copilot on: oversharing, sensitivity labels, DLP, identity and conditional access.
Published Reviewed
Managed IT
How much does business backup and disaster recovery cost?
What drives business backup and disaster recovery costs: data volume, cloud versus on-premises, Microsoft 365 backup, and your recovery targets.
Published Reviewed
Governance and audit
The NCSC Cyber Assessment Framework self-assessment, a practical guide
How the NCSC Cyber Assessment Framework self-assessment works: the four objectives A to D, and where it overlaps ISO 27001, explained plainly.
Published Reviewed
Cyber security
Cyber Essentials or ISO 27001: which does your business actually need?
Cyber Essentials or ISO 27001? A plain comparison of cost, scope, time, and how to read the contract clause that decides which your business needs.
Published Reviewed
Cyber security
How to prepare for Cyber Essentials Plus
The five Cyber Essentials controls, how Plus verifies them through technical testing, and common preparation gaps to address before your assessment.
Published Reviewed
Cyber security
Cyber Essentials for defence suppliers: Def Stan 05-138, DEFCON 658 and the supply chain
DEFCON 658 requires Cyber Essentials for MOD supply chain contracts. What it means, who it applies to, and how to certify – from a certification body.
Published Reviewed
Cyber security
How much does ISO 27001 cost?
ISO 27001 certification cost and price explained: body fees, internal effort, consultancy, plus surveillance and recertification. Indicative UK ranges.
Published Reviewed
Managed IT
How much should managed IT cost? A plain guide to UK pricing models
UK managed IT pricing explained: per-user and fixed monthly models, what drives the cost, and how it scales from small teams to organisations of 600+.
Published Reviewed
Software and AI
How to stop staff leaking data to ChatGPT and AI tools
How to stop staff leaking company data into ChatGPT and AI tools: an acceptable use policy, sanctioned tools, Microsoft 365 DLP and sensitivity labels, training.
Published Reviewed
Cyber security
Why businesses fail Cyber Essentials Plus, and how to pass first time
Why businesses fail Cyber Essentials Plus, from unpatched systems to multi-factor authentication gaps, and how to close them before the assessment.
Published Reviewed
No matching guides
Try a broader term, such as “Microsoft 365”, or select another topic.
Services behind the guides
Use the guides to prepare. Explore the service when you need help with the work.
Managed IT
IT support, Microsoft 365 and shared responsibilities with an internal IT team.
Managed IT pricingCyber security
Cyber Essentials, Cyber Essentials Plus and Defence Cyber Certification.
Cyber Essentials readiness checkSoftware and AI
Custom software, integrations, automation and governed AI adoption.
Microsoft Copilot servicesGovernance and audit
ISO 27001, the Cyber Assessment Framework (CAF), Def Stan 05-138 and audit readiness.
NCSC Cyber Advisor supportInsights by email
We are not sending newsletters yet. Join the list if you would like to hear when the first issue is ready.
Read the published guidesA question about your organisation?
Tell us what you are planning, which requirement you need to meet, or where you are getting stuck.