Guides
All 72 guides on one page, grouped by audience. A guide that suits more than one audience appears in each of them; the colored line under its card shows which audiences it belongs to (split equally between them).
-
Getting Started: Security Essentials for Individuals and Families
A calm, practical starting point for protecting your family's accounts, devices, and data, without needing to become a security expert first. Start here Audience: Individuals & Families
-
Encrypting and Backing Up Sensitive Data Without the Headache
A practical guide to combining encryption and backups so your sensitive files are protected both from strangers who steal your device and from the disasters that destroy it. Audience: Individuals & Families, Small & Medium Businesses
-
IoT and Smart Device Security Basics
Smart cameras, speakers, thermostats and doorbells all connect to your network, and most ship with weak default security. Here's how to lock them down. Audience: Individuals & Families, Small & Medium Businesses
-
Securing IoT and Smart Devices at Home and at Work
From smart doorbells to warehouse sensors, connected devices multiply faster than most security programs can track them. A practical guide to keeping the Internet of Things from becoming your weakest link. Audience: Individuals & Families, Small & Medium Businesses
-
AI Safety for Employees: What You Need to Know
AI safety for employees means knowing what can go wrong when you use AI tools at work, misplaced trust in outputs, manipulation of the AI itself, and data exposure, and how to use them without creating risk for yourself or your employer. Audience: Individuals & Families, Students & Educators, Security Professionals
-
Passkeys: The Password-Free Way to Sign In
Passkeys let you sign in with your fingerprint or face instead of a password, and they're resistant to phishing by design. Here's how they work and how to start using them. Audience: Individuals & Families, Students & Educators, Security Professionals
-
Recognizing Phishing in the Age of AI-Generated Scams
AI tools have made phishing messages more convincing and personalized than ever, and prompt injection adds an entirely new angle. Here's what's changed, and what still works to defend against it. Audience: Individuals & Families, Small & Medium Businesses, Security Professionals
-
Recognizing and Preventing Malware Infections
How malware actually gets onto your devices, the warning signs of an infection, and the everyday habits that stop most attacks before they start. Audience: Individuals & Families, Freelancers, Small & Medium Businesses
-
Securing Remote Work, Video Calls, and Social Media
Working from anywhere means your security perimeter now includes home Wi-Fi, video meetings, and the social profiles that reveal more about you than you might think. Audience: Individuals & Families, Freelancers, Small & Medium Businesses
-
Securing Your Cloud Accounts and Data
From email to file storage, most of what you rely on daily now lives in the cloud. Here's how to keep those accounts, and the personal data inside them, genuinely secure. Audience: Individuals & Families, Freelancers, Small & Medium Businesses
-
Creating Strong, Memorable Passwords
Why passwords get cracked, what makes a password strong, and practical ways to create passwords that are hard to break but easy to remember. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Public Sector
-
Keep Your Devices and Apps Updated
Updates don't just add features, they close known security holes. A simple, low-effort routine for keeping your phone and computer current. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Public Sector
-
Protect Your Accounts with Two-Factor Authentication
The single most effective step you can take to protect an account even if your password is stolen, with step-by-step setup for major platforms. Audience: Individuals & Families, Students & Educators, Small & Medium Businesses, Large Enterprises, Public Sector
-
Recognizing and Avoiding Online Scams
Fake messages, "act now" pressure, and convincing lookalike websites, learn the common tricks scammers use and how to protect yourself. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Public Sector
-
Back Up Your Important Files Regularly
Photos, documents and memories can disappear in an instant. A simple approach to backing up your phone (Android/iPhone) and computer. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Large Enterprises, Public Sector, Security Professionals
-
Getting Started: Building Security and AI-Safety Literacy for Students and Educators
A starting roadmap for students building cybersecurity knowledge and career direction, and for educators building that literacy into their classrooms. Start here Audience: Students & Educators
-
Building the Next Generation of Cyber Talent Through Education and Outreach
The cybersecurity skills gap will not close through hiring alone. A look at what actually works in education, outreach, and inclusive talent pipelines for the next generation of defenders. Audience: Students & Educators, Public Sector
-
Choosing the Right Cybersecurity Certification for Your Career Path
From entry-level foundations to specialized offensive security credentials, a practical guide to which certifications actually matter at each stage of a cybersecurity career. Audience: Students & Educators, Security Professionals
-
CyberFirst: Building the Next Generation of Security Talent
The cybersecurity talent shortage starts with education. Programs that introduce students to the field early, and the research that supports them, are a long-term defense investment. Audience: Students & Educators, Public Sector
-
AI Safety for Employees: What You Need to Know
AI safety for employees means knowing what can go wrong when you use AI tools at work, misplaced trust in outputs, manipulation of the AI itself, and data exposure, and how to use them without creating risk for yourself or your employer. Audience: Individuals & Families, Students & Educators, Security Professionals
-
Anatomy of a Cyber Attack: From Reconnaissance to Ransom
Understanding the typical stages of a cyber attack helps you recognize warning signs earlier, and understand why national cyber strategy focuses where it does. Audience: Students & Educators, Small & Medium Businesses, Security Professionals
-
Building a People-Centred Security Culture
The most effective security programs treat people as a defense, not just a risk. Here's how education, practice, and culture combine to make security actually work. Audience: Students & Educators, Small & Medium Businesses, Large Enterprises
-
Cryptography Basics: How Encryption Protects You
You rely on encryption dozens of times a day without noticing. Here's a practical, non-mathematical explanation of how it works and why it matters for secure design. Audience: Students & Educators, Large Enterprises, Security Professionals
-
Inclusive Security Exercises: Testing Your Human Defenses
Tabletop exercises and simulations reveal gaps that policy documents never do, and they work best when they reflect the full diversity of the people who will actually respond. Audience: Students & Educators, Large Enterprises, Public Sector
-
Inclusive Security: Why Diversity Strengthens Cyber Defence
Diverse teams catch blind spots that homogeneous teams miss, and academic research consistently backs this up. Here's why inclusion is a security advantage, not just a values statement. Audience: Students & Educators, Large Enterprises, Public Sector
-
Modern Authentication Architecture: Passwords, Passkeys, and Beyond
How passwords, passkeys, cryptography, and secure design fit together into a coherent authentication strategy, for teams designing systems, not just using them. Audience: Students & Educators, Large Enterprises, Security Professionals
-
Passkeys: The Password-Free Way to Sign In
Passkeys let you sign in with your fingerprint or face instead of a password, and they're resistant to phishing by design. Here's how they work and how to start using them. Audience: Individuals & Families, Students & Educators, Security Professionals
-
Prompt Injection: The New Frontier of AI Attacks
When an AI assistant reads a webpage, email, or document, hidden instructions inside that content can hijack its behavior. Here's what prompt injection is and how organizations are defending against it. Audience: Students & Educators, Large Enterprises, Security Professionals
-
Creating Strong, Memorable Passwords
Why passwords get cracked, what makes a password strong, and practical ways to create passwords that are hard to break but easy to remember. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Public Sector
-
Keep Your Devices and Apps Updated
Updates don't just add features, they close known security holes. A simple, low-effort routine for keeping your phone and computer current. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Public Sector
-
Protect Your Accounts with Two-Factor Authentication
The single most effective step you can take to protect an account even if your password is stolen, with step-by-step setup for major platforms. Audience: Individuals & Families, Students & Educators, Small & Medium Businesses, Large Enterprises, Public Sector
-
Recognizing and Avoiding Online Scams
Fake messages, "act now" pressure, and convincing lookalike websites, learn the common tricks scammers use and how to protect yourself. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Public Sector
-
Back Up Your Important Files Regularly
Photos, documents and memories can disappear in an instant. A simple approach to backing up your phone (Android/iPhone) and computer. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Large Enterprises, Public Sector, Security Professionals
-
Getting Started: Security Essentials for Freelancers
You are your own IT department. Here is the short, practical list of what actually matters for a one-person business, in the order it matters. Start here Audience: Freelancers
-
Building an Incident Response Plan for Small Teams
You don't need a security team to have a plan. A simple, written incident response plan turns a chaotic security event into a manageable one. Audience: Freelancers, Small & Medium Businesses, Large Enterprises
-
Recognizing and Preventing Malware Infections
How malware actually gets onto your devices, the warning signs of an infection, and the everyday habits that stop most attacks before they start. Audience: Individuals & Families, Freelancers, Small & Medium Businesses
-
Securing Remote Work, Video Calls, and Social Media
Working from anywhere means your security perimeter now includes home Wi-Fi, video meetings, and the social profiles that reveal more about you than you might think. Audience: Individuals & Families, Freelancers, Small & Medium Businesses
-
Securing Your Cloud Accounts and Data
From email to file storage, most of what you rely on daily now lives in the cloud. Here's how to keep those accounts, and the personal data inside them, genuinely secure. Audience: Individuals & Families, Freelancers, Small & Medium Businesses
-
Creating Strong, Memorable Passwords
Why passwords get cracked, what makes a password strong, and practical ways to create passwords that are hard to break but easy to remember. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Public Sector
-
Keep Your Devices and Apps Updated
Updates don't just add features, they close known security holes. A simple, low-effort routine for keeping your phone and computer current. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Public Sector
-
Recognizing and Avoiding Online Scams
Fake messages, "act now" pressure, and convincing lookalike websites, learn the common tricks scammers use and how to protect yourself. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Public Sector
-
Back Up Your Important Files Regularly
Photos, documents and memories can disappear in an instant. A simple approach to backing up your phone (Android/iPhone) and computer. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Large Enterprises, Public Sector, Security Professionals
-
Getting Started: Security Essentials for Small and Medium Businesses
The practical, budget-conscious starting point for protecting your business, your team, and your customers, without needing a dedicated security hire. Start here Audience: Small & Medium Businesses
-
A Patch Management Program That Scales Past Patch Tuesday
Monthly patch cycles work fine until your environment grows past a few dozen systems. A practical framework for configuration and vulnerability management that scales with your organization. Audience: Small & Medium Businesses, Security Professionals
-
Anatomy of a Ransomware Attack: Detection, Response, and Recovery
A step-by-step walk-through of how a ransomware attack actually unfolds inside an organization, and the decisions that determine whether it becomes a bad day or a business-ending event. Audience: Small & Medium Businesses, Security Professionals
-
Business Email Compromise: The Phishing Attack That Costs Millions
Business email compromise causes more reported financial losses than any other cybercrime category. Understanding how it works is the key to stopping it. Audience: Small & Medium Businesses, Large Enterprises
-
Cyber Essentials in Practice: A Five-Control Implementation Checklist
A practical, step-by-step checklist for implementing the five core technical controls behind Cyber Essentials certification, without the jargon. Audience: Small & Medium Businesses, Public Sector
-
Encrypting and Backing Up Sensitive Data Without the Headache
A practical guide to combining encryption and backups so your sensitive files are protected both from strangers who steal your device and from the disasters that destroy it. Audience: Individuals & Families, Small & Medium Businesses
-
IoT and Smart Device Security Basics
Smart cameras, speakers, thermostats and doorbells all connect to your network, and most ship with weak default security. Here's how to lock them down. Audience: Individuals & Families, Small & Medium Businesses
-
Managing a Growing Fleet of Devices and IoT
From laptops to smart cameras to video conferencing hardware, the number of connected devices an organization must manage keeps growing. Here's how to keep visibility as the fleet scales. Audience: Small & Medium Businesses, Large Enterprises
-
Penetration Testing 101: What to Expect and How to Prepare
Considering your first penetration test? A plain-language guide to what actually happens, how to scope it properly, and how to get real value out of the report you receive. Audience: Small & Medium Businesses, Security Professionals
-
Securing IoT and Smart Devices at Home and at Work
From smart doorbells to warehouse sensors, connected devices multiply faster than most security programs can track them. A practical guide to keeping the Internet of Things from becoming your weakest link. Audience: Individuals & Families, Small & Medium Businesses
-
Anatomy of a Cyber Attack: From Reconnaissance to Ransom
Understanding the typical stages of a cyber attack helps you recognize warning signs earlier, and understand why national cyber strategy focuses where it does. Audience: Students & Educators, Small & Medium Businesses, Security Professionals
-
Backup and Business Continuity Beyond the Basics
A backup that's never been tested for restoration, or an asset nobody knew existed, can undo months of planning. Here's how to build real continuity, not just a backup schedule. Audience: Small & Medium Businesses, Large Enterprises, Public Sector
-
Building a People-Centred Security Culture
The most effective security programs treat people as a defense, not just a risk. Here's how education, practice, and culture combine to make security actually work. Audience: Students & Educators, Small & Medium Businesses, Large Enterprises
-
Building an Incident Response Plan for Small Teams
You don't need a security team to have a plan. A simple, written incident response plan turns a chaotic security event into a manageable one. Audience: Freelancers, Small & Medium Businesses, Large Enterprises
-
Closing the Window: Patch and Configuration Management
Most breaches exploit vulnerabilities that already had a fix available. Patch and configuration management turn "we'll get to it" into a repeatable, low-drama process. Audience: Small & Medium Businesses, Large Enterprises, Security Professionals
-
Recognizing Phishing in the Age of AI-Generated Scams
AI tools have made phishing messages more convincing and personalized than ever, and prompt injection adds an entirely new angle. Here's what's changed, and what still works to defend against it. Audience: Individuals & Families, Small & Medium Businesses, Security Professionals
-
Recognizing and Preventing Malware Infections
How malware actually gets onto your devices, the warning signs of an infection, and the everyday habits that stop most attacks before they start. Audience: Individuals & Families, Freelancers, Small & Medium Businesses
-
Remote Work Security Testing and Supply Chain Awareness
Distributed teams and third-party tools expand an organization's attack surface in ways that are easy to overlook. Here's how testing and vendor awareness help close that gap. Audience: Small & Medium Businesses, Large Enterprises, Security Professionals
-
Securing Remote Work, Video Calls, and Social Media
Working from anywhere means your security perimeter now includes home Wi-Fi, video meetings, and the social profiles that reveal more about you than you might think. Audience: Individuals & Families, Freelancers, Small & Medium Businesses
-
Securing Your Cloud Accounts and Data
From email to file storage, most of what you rely on daily now lives in the cloud. Here's how to keep those accounts, and the personal data inside them, genuinely secure. Audience: Individuals & Families, Freelancers, Small & Medium Businesses
-
Creating Strong, Memorable Passwords
Why passwords get cracked, what makes a password strong, and practical ways to create passwords that are hard to break but easy to remember. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Public Sector
-
Keep Your Devices and Apps Updated
Updates don't just add features, they close known security holes. A simple, low-effort routine for keeping your phone and computer current. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Public Sector
-
Protect Your Accounts with Two-Factor Authentication
The single most effective step you can take to protect an account even if your password is stolen, with step-by-step setup for major platforms. Audience: Individuals & Families, Students & Educators, Small & Medium Businesses, Large Enterprises, Public Sector
-
Recognizing and Avoiding Online Scams
Fake messages, "act now" pressure, and convincing lookalike websites, learn the common tricks scammers use and how to protect yourself. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Public Sector
-
Back Up Your Important Files Regularly
Photos, documents and memories can disappear in an instant. A simple approach to backing up your phone (Android/iPhone) and computer. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Large Enterprises, Public Sector, Security Professionals
-
Getting Started: A Security and AI Governance Roadmap for Large Enterprises
Where a large, complex organization should focus first when building out its security and responsible-AI program, a roadmap, not a checklist. Start here Audience: Large Enterprises
-
Active Cyber Defence and National Strategy: Protecting Critical Infrastructure
How national cyber strategies and active defence programs work together to protect the infrastructure that societies depend on, and what it means for organizations operating within it. Audience: Large Enterprises, Public Sector
-
Business Email Compromise: The Phishing Attack That Costs Millions
Business email compromise causes more reported financial losses than any other cybercrime category. Understanding how it works is the key to stopping it. Audience: Small & Medium Businesses, Large Enterprises
-
Managing a Growing Fleet of Devices and IoT
From laptops to smart cameras to video conferencing hardware, the number of connected devices an organization must manage keeps growing. Here's how to keep visibility as the fleet scales. Audience: Small & Medium Businesses, Large Enterprises
-
Passwordless in Practice: Rolling Out Passkeys Across Your Organization
Passkeys promise to eliminate phishing-driven credential theft entirely. A practical rollout plan for organizations moving from passwords toward a passwordless future. Audience: Large Enterprises, Security Professionals
-
People-Centred Security: Designing Policies Humans Actually Follow
Security policies that ignore how people actually work get quietly ignored. A practical look at designing remote work, video conferencing, and social media policies people follow because they make sense. Audience: Large Enterprises, Public Sector
-
Securing Your Cloud Supply Chain: Vendor Risk in Practice
Your cloud security is only as strong as your weakest vendor. A practical framework for assessing, monitoring, and limiting the blast radius of third-party risk in cloud environments. Audience: Large Enterprises, Security Professionals
-
Writing an AI Acceptable Use Policy Your Whole Organization Can Follow
A practical template and reasoning for the policy every organization now needs: what staff can and cannot put into AI tools, and how to make the policy something people actually read. Audience: Large Enterprises, Public Sector
-
AI Governance: Building Responsible AI Policies
As AI tools spread across organizations, governance policy, not just technical controls, determines whether adoption is safe, compliant, and trustworthy. Audience: Large Enterprises, Public Sector, Security Professionals
-
Active Cyber Defence and National Cyber Strategy
Beyond individual organizations, governments run large-scale programs to reduce cyber harm across entire countries. Here's how active defence and national strategy fit together. Audience: Large Enterprises, Public Sector, Security Professionals
-
Backup and Business Continuity Beyond the Basics
A backup that's never been tested for restoration, or an asset nobody knew existed, can undo months of planning. Here's how to build real continuity, not just a backup schedule. Audience: Small & Medium Businesses, Large Enterprises, Public Sector
-
Building a People-Centred Security Culture
The most effective security programs treat people as a defense, not just a risk. Here's how education, practice, and culture combine to make security actually work. Audience: Students & Educators, Small & Medium Businesses, Large Enterprises
-
Building an Incident Response Plan for Small Teams
You don't need a security team to have a plan. A simple, written incident response plan turns a chaotic security event into a manageable one. Audience: Freelancers, Small & Medium Businesses, Large Enterprises
-
Bulk Data and Logging: Why Visibility Matters
You can't detect what you can't see. Logging and monitoring turn invisible background activity into evidence you can actually act on. Audience: Large Enterprises, Public Sector, Security Professionals
-
Closing the Window: Patch and Configuration Management
Most breaches exploit vulnerabilities that already had a fix available. Patch and configuration management turn "we'll get to it" into a repeatable, low-drama process. Audience: Small & Medium Businesses, Large Enterprises, Security Professionals
-
Cloud Security Assessments and Certification
Moving to the cloud shifts, but does not remove, your security responsibilities. Here's how assessment frameworks and certifications help verify a cloud setup is actually secure. Audience: Large Enterprises, Public Sector, Security Professionals
-
Critical Infrastructure and Active Cyber Defence
Energy, water, healthcare, and transportation systems face security demands beyond typical organizations, and benefit from national-level active defence programs designed specifically for them. Audience: Large Enterprises, Public Sector, Security Professionals
-
Cryptography Basics: How Encryption Protects You
You rely on encryption dozens of times a day without noticing. Here's a practical, non-mathematical explanation of how it works and why it matters for secure design. Audience: Students & Educators, Large Enterprises, Security Professionals
-
Incident Management and Security Logging in Practice
When an incident happens, the quality of your logs determines how quickly you understand what occurred, and how confidently you can say it's truly resolved. Audience: Large Enterprises, Public Sector, Security Professionals
-
Inclusive Security Exercises: Testing Your Human Defenses
Tabletop exercises and simulations reveal gaps that policy documents never do, and they work best when they reflect the full diversity of the people who will actually respond. Audience: Students & Educators, Large Enterprises, Public Sector
-
Inclusive Security: Why Diversity Strengthens Cyber Defence
Diverse teams catch blind spots that homogeneous teams miss, and academic research consistently backs this up. Here's why inclusion is a security advantage, not just a values statement. Audience: Students & Educators, Large Enterprises, Public Sector
-
Modern Authentication Architecture: Passwords, Passkeys, and Beyond
How passwords, passkeys, cryptography, and secure design fit together into a coherent authentication strategy, for teams designing systems, not just using them. Audience: Students & Educators, Large Enterprises, Security Professionals
-
Penetration Testing and Security Assessments Explained
What a penetration test actually involves, how it differs from a vulnerability scan, and how frameworks and certifications fit into a mature security program. Audience: Large Enterprises, Public Sector, Security Professionals
-
Prompt Injection: The New Frontier of AI Attacks
When an AI assistant reads a webpage, email, or document, hidden instructions inside that content can hijack its behavior. Here's what prompt injection is and how organizations are defending against it. Audience: Students & Educators, Large Enterprises, Security Professionals
-
Remote Work Security Testing and Supply Chain Awareness
Distributed teams and third-party tools expand an organization's attack surface in ways that are easy to overlook. Here's how testing and vendor awareness help close that gap. Audience: Small & Medium Businesses, Large Enterprises, Security Professionals
-
Supply Chain Security: Protecting Your Vendors and Partners
A growing share of major breaches start with a trusted vendor, not the target organization itself. Here's how to think about supply chain risk practically. Audience: Large Enterprises, Public Sector, Security Professionals
-
Protect Your Accounts with Two-Factor Authentication
The single most effective step you can take to protect an account even if your password is stolen, with step-by-step setup for major platforms. Audience: Individuals & Families, Students & Educators, Small & Medium Businesses, Large Enterprises, Public Sector
-
Back Up Your Important Files Regularly
Photos, documents and memories can disappear in an instant. A simple approach to backing up your phone (Android/iPhone) and computer. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Large Enterprises, Public Sector, Security Professionals
-
Getting Started: A Security Roadmap for Public Sector Organizations
A practical starting roadmap for government and public service organizations balancing national-scale risk, compliance requirements, and public trust. Start here Audience: Public Sector
-
Active Cyber Defence and National Strategy: Protecting Critical Infrastructure
How national cyber strategies and active defence programs work together to protect the infrastructure that societies depend on, and what it means for organizations operating within it. Audience: Large Enterprises, Public Sector
-
Building the Next Generation of Cyber Talent Through Education and Outreach
The cybersecurity skills gap will not close through hiring alone. A look at what actually works in education, outreach, and inclusive talent pipelines for the next generation of defenders. Audience: Students & Educators, Public Sector
-
Cyber Essentials in Practice: A Five-Control Implementation Checklist
A practical, step-by-step checklist for implementing the five core technical controls behind Cyber Essentials certification, without the jargon. Audience: Small & Medium Businesses, Public Sector
-
CyberFirst: Building the Next Generation of Security Talent
The cybersecurity talent shortage starts with education. Programs that introduce students to the field early, and the research that supports them, are a long-term defense investment. Audience: Students & Educators, Public Sector
-
People-Centred Security: Designing Policies Humans Actually Follow
Security policies that ignore how people actually work get quietly ignored. A practical look at designing remote work, video conferencing, and social media policies people follow because they make sense. Audience: Large Enterprises, Public Sector
-
Writing an AI Acceptable Use Policy Your Whole Organization Can Follow
A practical template and reasoning for the policy every organization now needs: what staff can and cannot put into AI tools, and how to make the policy something people actually read. Audience: Large Enterprises, Public Sector
-
AI Governance: Building Responsible AI Policies
As AI tools spread across organizations, governance policy, not just technical controls, determines whether adoption is safe, compliant, and trustworthy. Audience: Large Enterprises, Public Sector, Security Professionals
-
Active Cyber Defence and National Cyber Strategy
Beyond individual organizations, governments run large-scale programs to reduce cyber harm across entire countries. Here's how active defence and national strategy fit together. Audience: Large Enterprises, Public Sector, Security Professionals
-
Backup and Business Continuity Beyond the Basics
A backup that's never been tested for restoration, or an asset nobody knew existed, can undo months of planning. Here's how to build real continuity, not just a backup schedule. Audience: Small & Medium Businesses, Large Enterprises, Public Sector
-
Bulk Data and Logging: Why Visibility Matters
You can't detect what you can't see. Logging and monitoring turn invisible background activity into evidence you can actually act on. Audience: Large Enterprises, Public Sector, Security Professionals
-
Cloud Security Assessments and Certification
Moving to the cloud shifts, but does not remove, your security responsibilities. Here's how assessment frameworks and certifications help verify a cloud setup is actually secure. Audience: Large Enterprises, Public Sector, Security Professionals
-
Critical Infrastructure and Active Cyber Defence
Energy, water, healthcare, and transportation systems face security demands beyond typical organizations, and benefit from national-level active defence programs designed specifically for them. Audience: Large Enterprises, Public Sector, Security Professionals
-
Incident Management and Security Logging in Practice
When an incident happens, the quality of your logs determines how quickly you understand what occurred, and how confidently you can say it's truly resolved. Audience: Large Enterprises, Public Sector, Security Professionals
-
Inclusive Security Exercises: Testing Your Human Defenses
Tabletop exercises and simulations reveal gaps that policy documents never do, and they work best when they reflect the full diversity of the people who will actually respond. Audience: Students & Educators, Large Enterprises, Public Sector
-
Inclusive Security: Why Diversity Strengthens Cyber Defence
Diverse teams catch blind spots that homogeneous teams miss, and academic research consistently backs this up. Here's why inclusion is a security advantage, not just a values statement. Audience: Students & Educators, Large Enterprises, Public Sector
-
Penetration Testing and Security Assessments Explained
What a penetration test actually involves, how it differs from a vulnerability scan, and how frameworks and certifications fit into a mature security program. Audience: Large Enterprises, Public Sector, Security Professionals
-
Supply Chain Security: Protecting Your Vendors and Partners
A growing share of major breaches start with a trusted vendor, not the target organization itself. Here's how to think about supply chain risk practically. Audience: Large Enterprises, Public Sector, Security Professionals
-
Creating Strong, Memorable Passwords
Why passwords get cracked, what makes a password strong, and practical ways to create passwords that are hard to break but easy to remember. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Public Sector
-
Keep Your Devices and Apps Updated
Updates don't just add features, they close known security holes. A simple, low-effort routine for keeping your phone and computer current. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Public Sector
-
Protect Your Accounts with Two-Factor Authentication
The single most effective step you can take to protect an account even if your password is stolen, with step-by-step setup for major platforms. Audience: Individuals & Families, Students & Educators, Small & Medium Businesses, Large Enterprises, Public Sector
-
Recognizing and Avoiding Online Scams
Fake messages, "act now" pressure, and convincing lookalike websites, learn the common tricks scammers use and how to protect yourself. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Public Sector
-
Back Up Your Important Files Regularly
Photos, documents and memories can disappear in an instant. A simple approach to backing up your phone (Android/iPhone) and computer. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Large Enterprises, Public Sector, Security Professionals
-
Getting Started: A Technical Roadmap for Security Professionals
Where to focus your technical depth and career development if you're building or advancing a career in cybersecurity. Start here Audience: Security Professionals
-
Building a Security Operations Playbook: Logging, Monitoring, and Response
Detection tools are only as good as the process around them. A practical framework for turning logs and alerts into a security operations playbook your team can actually run under pressure. Audience: Security Professionals
-
Prompt Injection Defense in Production AI Systems
As AI agents move from answering questions to taking real actions, prompt injection stops being a curiosity and becomes a production security problem. Practical mitigations for teams building with AI. Audience: Security Professionals
-
A Patch Management Program That Scales Past Patch Tuesday
Monthly patch cycles work fine until your environment grows past a few dozen systems. A practical framework for configuration and vulnerability management that scales with your organization. Audience: Small & Medium Businesses, Security Professionals
-
Anatomy of a Ransomware Attack: Detection, Response, and Recovery
A step-by-step walk-through of how a ransomware attack actually unfolds inside an organization, and the decisions that determine whether it becomes a bad day or a business-ending event. Audience: Small & Medium Businesses, Security Professionals
-
Choosing the Right Cybersecurity Certification for Your Career Path
From entry-level foundations to specialized offensive security credentials, a practical guide to which certifications actually matter at each stage of a cybersecurity career. Audience: Students & Educators, Security Professionals
-
Passwordless in Practice: Rolling Out Passkeys Across Your Organization
Passkeys promise to eliminate phishing-driven credential theft entirely. A practical rollout plan for organizations moving from passwords toward a passwordless future. Audience: Large Enterprises, Security Professionals
-
Penetration Testing 101: What to Expect and How to Prepare
Considering your first penetration test? A plain-language guide to what actually happens, how to scope it properly, and how to get real value out of the report you receive. Audience: Small & Medium Businesses, Security Professionals
-
Securing Your Cloud Supply Chain: Vendor Risk in Practice
Your cloud security is only as strong as your weakest vendor. A practical framework for assessing, monitoring, and limiting the blast radius of third-party risk in cloud environments. Audience: Large Enterprises, Security Professionals
-
AI Governance: Building Responsible AI Policies
As AI tools spread across organizations, governance policy, not just technical controls, determines whether adoption is safe, compliant, and trustworthy. Audience: Large Enterprises, Public Sector, Security Professionals
-
AI Safety for Employees: What You Need to Know
AI safety for employees means knowing what can go wrong when you use AI tools at work, misplaced trust in outputs, manipulation of the AI itself, and data exposure, and how to use them without creating risk for yourself or your employer. Audience: Individuals & Families, Students & Educators, Security Professionals
-
Active Cyber Defence and National Cyber Strategy
Beyond individual organizations, governments run large-scale programs to reduce cyber harm across entire countries. Here's how active defence and national strategy fit together. Audience: Large Enterprises, Public Sector, Security Professionals
-
Anatomy of a Cyber Attack: From Reconnaissance to Ransom
Understanding the typical stages of a cyber attack helps you recognize warning signs earlier, and understand why national cyber strategy focuses where it does. Audience: Students & Educators, Small & Medium Businesses, Security Professionals
-
Bulk Data and Logging: Why Visibility Matters
You can't detect what you can't see. Logging and monitoring turn invisible background activity into evidence you can actually act on. Audience: Large Enterprises, Public Sector, Security Professionals
-
Closing the Window: Patch and Configuration Management
Most breaches exploit vulnerabilities that already had a fix available. Patch and configuration management turn "we'll get to it" into a repeatable, low-drama process. Audience: Small & Medium Businesses, Large Enterprises, Security Professionals
-
Cloud Security Assessments and Certification
Moving to the cloud shifts, but does not remove, your security responsibilities. Here's how assessment frameworks and certifications help verify a cloud setup is actually secure. Audience: Large Enterprises, Public Sector, Security Professionals
-
Critical Infrastructure and Active Cyber Defence
Energy, water, healthcare, and transportation systems face security demands beyond typical organizations, and benefit from national-level active defence programs designed specifically for them. Audience: Large Enterprises, Public Sector, Security Professionals
-
Cryptography Basics: How Encryption Protects You
You rely on encryption dozens of times a day without noticing. Here's a practical, non-mathematical explanation of how it works and why it matters for secure design. Audience: Students & Educators, Large Enterprises, Security Professionals
-
Incident Management and Security Logging in Practice
When an incident happens, the quality of your logs determines how quickly you understand what occurred, and how confidently you can say it's truly resolved. Audience: Large Enterprises, Public Sector, Security Professionals
-
Modern Authentication Architecture: Passwords, Passkeys, and Beyond
How passwords, passkeys, cryptography, and secure design fit together into a coherent authentication strategy, for teams designing systems, not just using them. Audience: Students & Educators, Large Enterprises, Security Professionals
-
Passkeys: The Password-Free Way to Sign In
Passkeys let you sign in with your fingerprint or face instead of a password, and they're resistant to phishing by design. Here's how they work and how to start using them. Audience: Individuals & Families, Students & Educators, Security Professionals
-
Penetration Testing and Security Assessments Explained
What a penetration test actually involves, how it differs from a vulnerability scan, and how frameworks and certifications fit into a mature security program. Audience: Large Enterprises, Public Sector, Security Professionals
-
Prompt Injection: The New Frontier of AI Attacks
When an AI assistant reads a webpage, email, or document, hidden instructions inside that content can hijack its behavior. Here's what prompt injection is and how organizations are defending against it. Audience: Students & Educators, Large Enterprises, Security Professionals
-
Recognizing Phishing in the Age of AI-Generated Scams
AI tools have made phishing messages more convincing and personalized than ever, and prompt injection adds an entirely new angle. Here's what's changed, and what still works to defend against it. Audience: Individuals & Families, Small & Medium Businesses, Security Professionals
-
Remote Work Security Testing and Supply Chain Awareness
Distributed teams and third-party tools expand an organization's attack surface in ways that are easy to overlook. Here's how testing and vendor awareness help close that gap. Audience: Small & Medium Businesses, Large Enterprises, Security Professionals
-
Supply Chain Security: Protecting Your Vendors and Partners
A growing share of major breaches start with a trusted vendor, not the target organization itself. Here's how to think about supply chain risk practically. Audience: Large Enterprises, Public Sector, Security Professionals
-
Back Up Your Important Files Regularly
Photos, documents and memories can disappear in an instant. A simple approach to backing up your phone (Android/iPhone) and computer. Audience: Individuals & Families, Students & Educators, Freelancers, Small & Medium Businesses, Large Enterprises, Public Sector, Security Professionals
-
Start Here: Behavioral Guidance for AI Systems and Agents
A practical starting point for an AI system or agent on how to behave safely and securely during everyday tasks, covering instruction authority, data and credential handling, tool-use caution, knowing when to escalate to a human, and staying honest about uncertainty. Start here Audience: For Artificial Intelligence
-
Avoiding Hallucination in Security-Sensitive Answers
Why fabricated details are especially costly in security and safety contexts, and concrete habits that reduce them. Audience: For Artificial Intelligence
-
Citing Sources Correctly in Security and Compliance Guidance
How an AI agent should reference regulations, advisories, and technical documentation without overstating certainty or fabricating detail. Audience: For Artificial Intelligence
-
Distinguishing System Instructions from User-Supplied Content
A practical framework for AI agents to separate authoritative instructions from content that merely describes or requests something. Audience: For Artificial Intelligence
-
Handling Sensitive Data You Encounter During a Task
Guidance for AI agents on what to do, and not do, when personal or confidential data surfaces while completing a task. Audience: For Artificial Intelligence
-
How to Recognize and Resist Prompt Injection in Untrusted Content
How an AI agent should treat instructions that appear inside documents, web pages, or tool output, not in the trusted system or user turn. Audience: For Artificial Intelligence
-
Minimizing Personal Data Exposure When Summarizing or Generating Content
Writing and summarizing on someone's behalf without carrying more personal detail forward than the task actually needs. Audience: For Artificial Intelligence
-
Recognizing Social Engineering Aimed at You, the AI, Not the User
How an AI agent should notice when it, rather than the human it serves, is the actual target of a manipulation attempt. Audience: For Artificial Intelligence
-
Resolving Conflicts Between Instructions: A Priority Order for AI Agents
A fallback priority order for the moment your system configuration, the current user, and earlier context all point in different directions. Audience: For Artificial Intelligence
-
Safe Defaults for Tool Use: Read vs. Write, Reversible vs. Irreversible
A simple risk model AI agents can apply to any tool call before executing it, based on whether the action reads or changes state. Audience: For Artificial Intelligence
-
Trust Boundaries Between Multiple AI Agents in a Shared Workflow
How an AI agent should treat instructions and data coming from another AI agent in a multi-agent system, rather than a human. Audience: For Artificial Intelligence
-
Verifying That a Request Actually Comes From an Authorized User
Practical signals an AI agent can use to judge whether the party making a request actually has standing to make it. Audience: For Artificial Intelligence
-
What Not to Do With API Keys, Credentials, or Secrets You See in Context
Rules for AI agents that encounter API keys, passwords, tokens, or other credentials while reading code, logs, or configuration. Audience: For Artificial Intelligence
-
What an AI Agent Should Log Before Taking a Risky Action
The minimum information an AI agent should record before executing an action with real-world consequences, so it can be reviewed later. Audience: For Artificial Intelligence
-
When an AI Agent Should Refuse or Pause Before Taking an Action
Concrete signals that should make an AI agent stop and check in before executing a tool call or task step, rather than proceeding by default. Audience: For Artificial Intelligence
-
When to Escalate to a Human: Practical Triggers for AI Agents
Specific situations that should prompt an AI agent to bring a human into the loop rather than resolving the situation autonomously. Audience: For Artificial Intelligence
No matching guides found.