This is brilliant. A standard we have needed for some time.

Privileged Access Workstations are now a ETSI - go fourth and defend - etsi.org/deliver/etsi_t…

Which security controls reduce cyber risk and by how much?

Until recently, vendors tried to answer with peacock like competition, e.g. ever fancier marketing campaigns.

Our new article is a step towards answering with empirical evidence.

Privileged Access Workstations are now a ETSI - go fourth and defend - etsi.org/deliver/etsi_t…

Exciting news for security and policing researchers! The Policing Areas of Research Interest (ARI) have just been published: science.police.uk/delivery/resou….

We’ve been doing a lot of work on AI and have some takeaways. Take a minute to read our new report on best practices for secure system deployment and maintenance.

My 2 minutes of fame….

Great NCSC UK post situating the trend of threat actors living on the edge.

'Anything on your perimeter, even fully patched, is increasingly in the firing line, and unless you have evidence that it can withstand attacks, you should consider removing it.'

Our post at NCSC UK from February seems prescient right now - 'Products on your perimeter considered harmful (until proven otherwise)'

Ask the questions of your vendors and developers, get the evidence and gain assurance.

ncsc.gov.uk/blog-post/prod…

If you've never seen 'The Net' starring Sandra Bullock, you're over due. Starting to wonder if these security product companies watched it and got crazy ideas.

Watch our CEO Felicity Oswald and CTO Ollie Whitehouse discuss the impact of quantum computing on cybersecurity, emerging regulation & the role of technology standards ahead of #CYBERUK24 👇
youtube.com/watch?v=kxNqeb…

Now if you happen to still be running it we should likely chat..

From Ollie Whitehouse's newsletter (note the legal disclaimer at the end of each issue):

'... the mere prospect has vendors lobbying for safe harbor on the basis it will allow the industry to mature incrementally.
ctoatncsc.substack.com/p/cto-at-ncsc-…

I need a few Mediatek MT1335WE chips for an upcoming book. If you have a DVD-ROM drive in your junk drawer, you could you please check to see if it has this controller?

Other chips in the series will not work, but retweets are appreciated.

Having a little withdrawal...

Thanks to Rob Joyce for his exceptional leadership of NSA Cyber over the last few years! I’m honored to take on this role as the new Director of Cybersecurity at NSA. Cyber is a team sport – I’m looking forward to working with partners across the community. - DPL