The National Cyber Security Centre (NCSC) provides an ‘Exercise in a Box’ online tool that can help businesses check how resilient they are to cyber attacks as well as practise their response in a safe environment.
The tool will give you some exercises that can be carried out in your own time as many times as you want. The exercises include:
-A ransomware attack delivered by phishing email;
-Mobile phone theft and response;
-Being attacked from an unknown Wi-Fi network;
-Insider threat leading to a data breach;
-Third party software compromise;
-Threatened leak of sensitive data;
-Home & remote working; and
-Managing a vulnerability disclosure.
Micro-exercises are also included, covering areas like use of passwords and identifying and reporting a suspected phishing email.
To use ‘Exercise in a Box’ you need to register for an account with NCSC, and you’ll be provided with a tailored report that helps you to identify what to do next and sets out where you can find helpful guidance.
See: https://www.ncsc.gov.uk/information/exercise-in-a-box
The government has published a raft of consultations on tax and business policies. It is worth being aware of these, as they are a good indicator of future policy direction likely to impact small businesses.
Employers may worry about the use of Non-Disclosure Agreements (NDA) following a series of press stories that have highlighted the abuse of the system.
.png)