Cyber Security Planning Guide

A short toolkit built around six areas of cyber readiness, with separate action lists for leaders and for whoever actually runs the systems. Every chapter ends with concrete first steps, which makes it a good starting point for a team with no security program yet.

Cybersecurity and Infrastructure Security Agency

Explains how to work out which information matters most to a business, then apply the identify, protect, detect, respond and recover functions at a scale a small team can sustain. Includes worksheets for cataloguing information and rating what it is worth.

Celia Paulsen, Patricia Toth

Eighteen chapters of best practice covering asset inventory, secure configuration, access control, authentication, network security, malware protection, logging, cryptography, teleworking, supply chain risk, backups, incident handling and business continuity. Opens with a section on security architecture and risk assessment.

National Cybersecurity Authority

A short awareness guide for organizations that handle sensitive personal data, explaining what cyber security is, how ransomware and phishing reach staff, and the practical steps a team can take to protect records and keep services running.

Skills for Care