🥁 James Pearce

From 27th April, important changes are coming to the UK's Cyber Essentials scheme, delivered by IASME on behalf of the NCSC. The scheme is introducing a new self-assessment questionnaire, Danzell, replacing the current Willow version. This aligns with the updated IT infrastructure doc v3.3, which replaces v3.2 and forms the technical baseline for both Cyber Essentials and Cyber Essentials Plus assessments from 27th April onwards. Updates include mandatory MFA for all cloud services where available, and stronger, clearer scoping definitions. Next week, we’ll take a closer look at what this means for organisations planning to achieve CE or CE+ certification after the release date, with tighter expectations around cloud services and access controls. We're an award winning certification body with over 10 years industry experience, and we genuinely enjoy helping folk make sense of it all. If you're considering certification but not quite sure where you stand, get in touch. We're always up for a proper conversation. 🌐 https://lnkd.in/eTQYhMTR 📞 0141 411 0101 📧 info@idcybersolutions.com Image: Behind the scenes of our interview with Neil Furminger, Head of Cyber Essentials at IASME. Link to interview in the comments. #Certification #Compliance #Updates IASME

11

1 Kommentar

Nearly 1 in 2 UK businesses report a basic technical cyber skills gap, with 49% highlighting this as a barrier to resilience - and 30% citing gaps in more advanced areas. Aligning development to the UK Cyber Security Council professional framework ensures teams are benchmarked against recognised standards, closing gaps and building confidence across roles to tackle evolving threats. The Level 4 Cyber Security Technologist Apprenticeship provides a funded, work-aligned pathway to strengthen internal capability, map learning to real organisational needs, and support long-term professionalisation. 🔗 Read more in our blog: https://lnkd.in/eA-FcBfJ 📞 Book a call to learn more about the apprenticeship: https://lnkd.in/e-2EuBSe #ukcybersecuritycouncil #ukcsc #cybersecurity #cyberresilience #cybercrime #cyber #training #apprenticeships

3

The UK Cyber Governance Code of Practice sets out the most critical governance actions boards are responsible for when it comes to cyber security. This week's free webinar focuses on the 'People' principle of the Code. Designed specifically for board members, the session covers translating cyber strategy into meaningful employee engagement, building a "See Something, Say Something" culture, improving board confidence around cyber, and gauging the effectiveness of training and awareness programmes. Space is limited, with the opportunity to engage directly with the instructor and submit questions in advance. 📅 Thursday 18 June 2026 | 14:00–15:00 BST | Free 🔗 Learn more at the link in the comments below. #CorporateGovernance #CyberGovernance #NonExecutiveDirector #BoardLeadership #CyberSecurity Cyber4Directors Susanne Alfs

6

1 Kommentar

Our first East Midlands Cyber Security Cluster newsletter is on the way 📰 In this first edition, we’ll be recapping last month’s Summit - key themes, standout sessions, and what happens next - along with updates on current cluster projects and upcoming activity across the region. We’ll also share ways to get more involved in the cluster’s work and highlight opportunities that may be relevant to local organisations. If you’d like these updates straight to your inbox, you can sign up to the newsletter here ➡️ http://eepurl.com/jyHA_U

20

🗞️ 𝐍𝐂𝐂 𝐆𝐫𝐨𝐮𝐩 𝐖𝐞𝐞𝐤𝐥𝐲 𝐌𝐞𝐝𝐢𝐚 𝐑𝐨𝐮𝐧𝐝𝐮𝐩   Cyber resilience, AI risks, and ransomware threats in the spotlight This week, NCC Group experts have been featured in the media, sharing critical insights on the evolving cyber threat landscape and what organisations must do to stay secure.   🔒 🔅Tim Rawlins on BBC News: JLR hack and supply chain resilience Senior Advisor Tim Rawlins joined BBC News to discuss the recent cyber attack on Jaguar Land Rover and the broader implications for UK businesses. His key message: “Resilience: survive and thrive.” ✅ Supply chains are increasingly vulnerable ✅ Businesses must secure third-party suppliers from day one ✅ Cyber resilience is no longer optional 📺 Watch the interview https://lnkd.in/eeFycF-6   🎙️ 🔅Tim Rawlins on BBC Radio 5 Live: Ransomware in early years education Tim also spoke to Kylie Pentelow about the ransomware attack on Kido nursery chain, highlighting the risks to sensitive personal data and the need for swift, transparent incident response. 🎧 Listen on BBC Sounds (timestamp 19:45): https://lnkd.in/eGDStwAB 🧠 David Brauchler III in The Washington Post: AI and cyber security risks Technical Director David Brauchler III featured in The Washington Post following his talk at Black Hat USA. He revealed how AI tools can be manipulated to expose sensitive data, warning: “We have never been this foolish with security.” 📖 Read the article: https://lnkd.in/gEn3afDy   📻 👤 Matt H. on BBC Radio 5 Live: Ransomware trends a employee risk Global Head of Threat Intelligence Matt Hull joined BBC Radio 5 Live Drive to discuss the shift in ransomware tactics. 🔐 Employees are now key entry points 💰 Paying ransoms fuels further attacks 📉 Attacks are becoming more targeted 🏢 Big brands are prime targets ⚖️ Debate continues around banning ransom payments 🕒 Listen from 54 minutes: https://lnkd.in/gcHaqUh4   📊 👤 Matt H. on BBC Radio 5 Live Drive: Kido nurseries attack and public sector threats Matt also discussed the ransomware attack on Kido nurseries, part of a troubling trend targeting hospitals, charities, and small businesses. According to NCC Group’s latest Threat Intelligence Report: ✅ The public sector remains a high-priority target ✅ Cloud misconfigurations and exposed APIs are key vulnerabilities 🎧 Listen to the interview: https://lnkd.in/eTr3x7hP #cybersecurity #ransomware

22

1 Kommentar

📢 Have you seen the Ministerial letter on cyber security to the FTSE 350? There are 3 specific requests - the second being: 🔹 Sign up to the NCSC’s Early Warning service. RB Consultancy Ltd have published a blog on the NCSC Early Warning service, explaining how the service: ✅ Alerts you to malware, vulnerabilities, and suspicious activity ✅ Helps detect threats before they escalate ✅ Complements existing security controls ✅ Supports supply chain resilience through proactive threat notification Useful links: RB Consultancy Ltd Blog-> https://lnkd.in/dKgFbFSu Ministerial Letter->  https://lnkd.in/ebndJGtC Contact Us -> https://lnkd.in/d-apQgJG #Cybersecurity #NCSC #IASME #RBConsultancyLtd

2

Cyber Resilience in 2025: Insights from the NCSC Annual Review The National Cyber Security Centre Annual Review 2025 paints a clear picture: cyber threats are evolving rapidly, and resilience must be embedded at every level - from technical teams to the boardroom. At Avella, we’re proud to see many of the themes we’ve consistently championed reflected in this year’s review: 💡Cyber Incident Exercising We’ve long advocated for realistic, board-level exercising - now a key NCSC priority. Our NCSC-assured simulations help organisations build confidence and capability before a crisis hits. 🤖 AI Threats & Opportunities As AI becomes both a tool and a target, our advisory services help clients navigate the risks of GenAI and LLMs, aligning with the NCSC’s call for proactive governance and technical understanding. 🔐 Post-Quantum Cryptography (PQC) With migration timelines now in motion, Avella is one of the few consultancies assured by the NCSC to support PQC discovery and planning - helping organisations future-proof their cryptographic resilience. The NCSC’s emphasis on transparency, collaboration, and technical excellence mirrors our own mission: to empower organisations with actionable insight, trusted expertise, and future-ready strategies. Read the full report here: https://lnkd.in/gsPDRdSD Contact us: https://lnkd.in/eXYZQrHD #CyberSecurity #NCSCReview #AvellaSecurity #AIThreats #PQC #CyberResilience #IncidentResponse #BoardEngagement #CyberFirst #DigitalTrust

3