Articles on certifications: practical cyber security and technology leadership insights for UK SMEs, written by James Griffiths.
So, DCC is not just a one-off audit per contract; it’s a forward-looking assurance mechanism to streamline supplier cyber assurance across multiple contracts, reduce duplication, and raise baseline cyber maturity in the defence supply chain. The Four Levels of DCC There are four levels (0 to 3) unde
In today’s increasingly digital economy, businesses are more reliant than ever on technology to store, process, and share information. While this reliance enables innovation and growth, it also exposes organisations to a wide range of cyber threats. From ransomware and insider attacks to regulatory
Introduction The UK is facing a cybersecurity paradox. On one hand, the volume and sophistication of cyber threats are escalating powered by artificial intelligence, state-sponsored espionage, and criminal syndicates. On the other hand, the country lacks enough skilled professionals to defend agains
The UK’s National Cyber Security Centre (NCSC) has officially released version 4.0 of the Cyber Assessment Framework (CAF) a significant update that reflects the changing cyber threat landscape, technological advancements, and evolving regulatory needs. With CAF becoming the de facto benchmark for a
The Cybersecurity Maturity Model Certification (CMMC) is a framework developed by the U.S. Department of Defense (DoD) to enhance cybersecurity practices across its supply chain. While primarily a U.S. initiative, CMMC has significant implications for UK businesses, especially those involved in the
The Defence Cyber Certification (DCC) is a newly introduced cybersecurity certification framework developed by the UK Ministry of Defence (MOD) in collaboration with IASME. It is designed to enhance the cyber resilience of the UK’s defence supply chain by providing a structured, organisation-wide as
In today’s rapidly evolving threat landscape, the need for credible, competent, and trustworthy cyber security providers has never been greater. To help organisations identify these trusted suppliers, the UK’s National Cyber Security Centre (NCSC) developed the Assured Cyber Security Consultancy sch
In the cybersecurity world, where trust and competence are paramount, the CREST certification scheme for organisations serves as a vital benchmark. Recognised globally, CREST (Council of Registered Ethical Security Testers) accredits organisations that deliver high-quality, technically competent, an
In the ever-evolving landscape of cybersecurity, certifications play a vital role in validating expertise and professionalism. One of the most respected bodies offering such credentials is CREST (Council of Registered Ethical Security Testers), an international not-for-profit accreditation and certi