CRA 24-hour reporting checklist: detection and triage
A checklist to make sure the Cyber Resilience Act's 24-hour clock never starts without anyone noticing, and that the people writing the early warning already have the facts they need.
Training & Awareness
Practical security training material for everyone in the organisation: checklists, plain-English explainers, exercises, and reviews of courses and training tools, free ones first.
OT Security 101: what OT is and why incidents start in IT
What operational technology is, how it differs from IT, and why so many OT incidents start on the office network. Part of our free OT Security 101 series.
Strong authentication checklist: passkeys, password managers and MFA
Passkeys first, a password manager for the rest, and the right kind of MFA. A printable checklist based on NCSC advice and NIST SP 800-63B-4.
Phishing checklist: spot it, report it, beat MFA fatigue and QR scams
A printable checklist for spotting phishing, handling a flood of MFA prompts or a QR code in an email, and reporting it in the UK. Based on NCSC and CISA guidance.
