We've just launched Turtledove NEST - The UK's best-in-class vulnerability scanner, come get the launch offer! Read more →

Cybersecurity Insights

Expert perspectives on security challenges, compliance, and best practices.

Topics

• Turtledove Cyber Team
Cyber Essentials Cyber Awareness Training

Prime Contractors & UK Supply Chain Cyber Security - A new whitepaper from Turtledove Cyber

Turtledove Cyber's new white paper argues UK prime contractors hold the key to supply chain cyber resilience. The infrastructure to act already exists.

Read article
• Savva Pistolas
Guidance Passkeys

Passkeys: An Easier Login Is Already on Your Device

Passkeys beat passwords on security, speed, and convenience. Savva joined BBC Breakfast alongside the NCSC to explain why, and what it means for your Cyber Essentials certification.

Read article
• Turtledove Cyber Team
Cyber Essentials Guidance

Cyber Essentials is Changing in April 2026: What You Need to Know About the Danzell Question Set

Cyber Essentials gets a ‘refresh’ every year. Most of the time the changes are modest, and organisations that treat the scheme seriously rather than as a box-tick exercise barely notice the difference

Read article
• Turtledove Cyber Team
Guidance Thought Piece

You are the supply chain, we are the supply chain, they are the supply chain.

‘Supply chain’ is a renewed focus for threat intelligence, government interests, and enterprise this year. The statistics continue to show that there is a clear focus by criminals to compromise organi

Read article
• Turtledove Cyber Team
Cyber Essentials Guidance

Firewall Fundamentals: The Cyber Essential requirements to consider

Firewalls are a cybersecurity fundamental that should be in place for all businesses and organisations, regardless of size and shape. They serve as a filter at the entry and exit points of your device

Read article
• Turtledove Cyber Team
Guidance Cyber Essentials

Windows 10 End-of-Life: A Cyber Essentials Compliance Guide

A bit of a dry one this week, but as the end of life for Windows 10 is right around the corner, we wanted to make sure we’ve put out a reminder for any organisations that haven’t started taking steps.

Read article
• Turtledove Cyber Team
Guidance Thought Piece

The correct approach to cybersecurity: What it means to be a ‘full stack’ consultancy.

It’s definitely a bit contentious to say that there’s a correct approach to cybersecurity. While there certainly comes a point where security decisions consist of forked paths of strategic direction a

Read article
• Turtledove Cyber Team
Guidance Artificial Intelligence in Cybersecurity

Shadow AI: The problem you’ve already got and what to do about it.

Modern AI promises to revolutionise how we work, automating tedious tasks like data entry, proofreading, and spreadsheet management. While it's an excellent time to invest in workplace AI, new solutio

Read article
• Turtledove Cyber Team
Guidance Penetration Testing

Pentesting: What do we ask you when we scope for a pentest?

Penetration testing is a security workpiece that can often feel a bit mysterious or confusing – especially for teams undertaking their first security assessment. The combination of a subject matter yo

Read article
• Turtledove Cyber Team
Cyber Essentials Guidance

Setting scope – What you need to know about the secret sixth control of Cyber Essentials

In our journey as a certification body – we take time to meet with a lot of smaller teams who are still trying to figure out exactly what the journey for IASME Cyber Essentials and Cyber Essentials Pl

Read article
• Turtledove Cyber Team
Guidance Thought Piece

Communication-Centred Security Training: Integrating Policy and Awareness

Going to get a bit reflective in this one! Most organisations treat policy development and security awareness training as separate exercises – and often regard them as separate functions entirely. Pol

Read article
• Turtledove Cyber Team
Cyber Essentials Uncategorized

Cyber Essentials Plus Checklist: What to Ask Your MSP or IT Provider Before CE Certification

Getting ready for Cyber Essentials (CE) or Cyber Essentials Plus (CE+) certification is almost always a fact-finding mission. Inevitably you discover blind spots in coverage or uncover gaps in coverag

Read article
• Turtledove Cyber Team
Cyber Assurance Uncategorized

IASME’s new Cyber Assurance update is a cybersecurity roadmap in disguise

IASME just dropped the May 2025 update to Cyber Assurance which is now on V7.0, and if you’re happy to think a bit conceptually you'll find that this is a really useful resource for developing or impr

Read article
• Turtledove Cyber Team
Cyber Essentials Guidance

Cyber Essentials Willow Update 2025: Complete Guide to the Changes

The new Cyber Essentials update is here, and everyone is combing through changes thinking about how it might affect their new or yearly effort to badge up to either Cyber Essentials or Cyber Essential

Read article
• Turtledove Cyber Team
Guidance Cyber Essentials Plus

Protecting Your Nonprofit After Microsoft’s 2025 Business Premium License Changes

A curve ball is heading for nonprofits in the coming months as Microsoft announces the removal of the free MS365 Business Premium licenses from their charitable offerings. This change will change the

Read article
• Turtledove Cyber Team
Guidance Penetration Testing

Deciding on Penetration Testing: Understanding existing NCSC Guidance and Qualifications

Conversations around quality assurance are vital when we're talking about picking a team to support your organisation with cybersecurity. All too often, not knowing exactly what to ask of providers is

Read article
• Turtledove Cyber Team
Thought Piece

DSTL’s New ‘Secure by Design’ Problem Book: How industry can rise to meet ongoing challenges – and the solutions we carry with us already.

Last week, the Defence Science and Technology Laboratory (DSTL) recently released their "Secure by Design Problem Book," highlighting critical challenges in implementing security-by-design principle

Read article
• Turtledove Cyber Team
Vulnerability Management

Vulnerability Management for everyone: Why Per-Device Scanning Doesn’t Have to Break the Bank

In today's increasingly hostile digital landscape, vulnerability management isn't just for the big players anymore. Small and medium-sized businesses (SMBs) are rapidly recognizing this reality, with

Read article
• Turtledove Cyber Team
Uncategorized air traffic control disruption

Ensuring the Skies Stay Open

The Vital Role of Business Continuity Planning and ISO 22301, post the UK fault at National Air Traffic Services. In today's interconnected world, businesses across all industries depend heavily on ef

Read article
• Turtledove Cyber Team
Uncategorized Cyber Assurance

Leveraging an Electronic Information Security Management System

In the ever-evolving digital landscape, organisations are facing increasingly sophisticated threats to their data security. Information Security Management System (ISMS) is a comprehensive framework d

Read article
• Turtledove Cyber Team
Cyber Essentials Access Control Security

Understanding IASME Cyber Essentials Plus

Where cyber threats are increasingly sophisticated, businesses must prioritise robust security measures to protect sensitive data and maintain compliance with industry standards. One such standard gai

Read article
• Turtledove Cyber Team
Cyber Essentials Cyber Awareness Training

Achieve Cyber Essentials Certification with Our Support

Cybercrime can have a devastating impact. At worst, it can cause a company to suffer significant financial losses, reputational damage, and disruptions to their day-to-day operations. It’s therefore v

Read article
• Turtledove Cyber Team
Uncategorized Cyber Security

Beware the Shadow Within: The Cyber Insider Threat

In my previous life as the Manager of the North West Regional Organised Crime Unit (ROCU) Cyber Crime Team, my team dealt with many serious and significant cyber attacks and cyber incidents. None were

Read article
• Turtledove Cyber Team
Uncategorized Business Data Protection

BYOD – The Cyber Security Challenges When Staff Use Their Own Devices.

While BYOD can enhance flexibility and productivity, it introduces risks that businesses need to address to ensure the safety of their sensitive data. Let's dive into some of the key challenges faced

Read article
• Turtledove Cyber Team
Cyber Essentials Charity Cybersecurity

Charity Cyber Essentials Awareness Fortnight 6th – 17th November 2023

Charities are sitting on a data treasure trove. Valuable information on beneficiaries, supporters and volunteers as well as invoice and payment details can be sold by cyber criminals and used to ident

Read article
• Turtledove Cyber Team
Uncategorized Compliance Changes

Cyber Essentials has changed!

The NSCS and Government approved Cyber Essentials scheme provided by IASME has recently changed and the new ‘Montpellier’ version 3.1 is now in effect. Read our blog to see how this provides even more

Read article
• Turtledove Cyber Team
Uncategorized Catfishing

Danger Lurking on Social Media: Catfishing on LinkedIn and How to Stay Secure

In an era predominantly driven by digital interactions, social media platforms have become essential for many aspects of our professional lives. LinkedIn, a popular network for professionals, offers t

Read article
• Turtledove Cyber Team
Uncategorized Cyber Essentials

Everything You Need To Know About Cyber Essentials Certification

No matter the size of an organisation or the industry you work in, cybersecurity is an important issue. So, what exactly is Cyber Essentials Certification, and why does it matter to your business? Put

Read article
• Turtledove Cyber Team
Uncategorized Cyber Security

Fortify Your Small Business

In an increasingly digital world, small businesses are more reliant on technology than ever before. While this has brought numerous benefits, it has also exposed them to a growing number of cybersecur

Read article
• Turtledove Cyber Team
Cyber Essentials Cyber Security

Hints & Tips for your Cyber Essentials Assessment

For some organisations Cyber Essentials certification scheme requirements can be challenging. Here are some common pitfalls explained and suggestions in how to avoid them.

Read article
• Turtledove Cyber Team
Cyber Essentials Configuration Controls

IASME Cyber Essentials – Configuration Controls

Enhancing Cybersecurity with IASME Cyber Essentials: A Focus on Configuration Controls Introduction:

Read article
• Turtledove Cyber Team
Uncategorized Cyber Essentials

Innovative Cybersecurity Solutions For Businesses In The UK

Want to demonstrate your company’s commitment to cybersecurity? Achieving certification in Cyber Essentials is one of the best ways to signify to clients and stakeholders that you’re equipped for the

Read article
• Turtledove Cyber Team
Uncategorized Consumer Advice

Keep Your Wits About You While Shopping Online.

Unfortunately, we all know someone who has been affected by an online scam. Don't become a victim.

Read article
• Turtledove Cyber Team
Uncategorized Cybersecurity Awareness Training

Safeguarding Office 365 “HTML” Attachments – Combatting the Latest Phishing Trend

As cybercriminals continuously innovate their techniques, a new phishing trend has emerged, targeting Office 365 users through HTML attachments. This alarming trend has heightened the need for robust

Read article
• Turtledove Cyber Team
Uncategorized Cyber Crime

Tackling Cyber Crime in the UK Legal Sector

Safeguarding Trust and Confidentiality

Read article
• Turtledove Cyber Team
Uncategorized Cyber Essentials

The Importance of Operating System Updates for increased Cyber Security

Keeping your operating system (OS) updated with the latest security patches is an essential best practice in today's cybersecurity landscape. However, despite its critical importance, many organisatio

Read article
• Turtledove Cyber Team
Uncategorized Cyber Security

The Transport & Logistics Industry and the Indispensable Benefits of IASME Cyber Essentials Certification

Advancing the Transport Industry: The Indispensable Benefits of IASME Cyber Essentials

Read article
• Turtledove Cyber Team
Cyber Essentials Cyber Security

Unveiling the Benefits of IASME Cyber Essentials for Remote Workforces

With the rise of remote work, it is crucial for organisations to prioritise cybersecurity to protect sensitive data and maintain business continuity. One effective way to achieve this is by implementi

Read article
• Turtledove Cyber Team
Cyber Essentials Cyber Security

What is Cyber Essentials?

Cyber Essentials is an effective, Government backed scheme that will help you to protect your organisation from common cyber attacks.

Read article
• Turtledove Cyber Team
Cyber Essentials Cyber Security

Why Organisations Still Need Cyber Essentials Certification, Even If They Have ISO27001

ISO/IEC 27001 is the International Information Security Standard, so how does Cyber Essential weight up

Read article
• Turtledove Cyber Team
Uncategorized

Congratulations to our Lead Assessor

Savva Pistolas is the Lead Assessor for Turtledove Cyber; a qualified penetration tester with years of experience providing hands-on support to small and medium enterprises. He's also an ISO 27001 Lead Implemente

Read article
• Turtledove Cyber Team
Uncategorized Academic Integrity

Navigating the Shadows – Fake Conferences

Academic and professional landscapes have evolved tremendously; however, alongside these advancements, a problematic trend has emerged: the onslaught of spam email invites to predatory conferences. Th

Read article
• Turtledove Cyber Team
Uncategorized Cyber Essentials Certification

Unlocking Cyber Safety

Welcome to our latest blog relating to IASME Cyber Essentials. This scheme helps organisations, especially smaller businesses, protect themselves from common cyber threats. Today, we will cover the fi

Read article
• Turtledove Cyber Team
Uncategorized .cn Domain Registration Fraud

Chinese Domain Name Scam

The China domain name registration scam, initially reported in 2010, continues to be perpetrated by con artists. Despite being widely recognised, these fraudsters are still devising means to deceive u

Read article
• Turtledove Cyber Team
Cyber Essentials Anti-Virus Configuration

Cyber Essentials Plus Pre-Audit Checklist

Pre-audit checklist to ensure a smooth onsite audit Ensure you have obtained your Cyber Essentials certification within 3 months of this Cyber Essentials Plus audit. A consent form will be required pr

Read article
• Turtledove Cyber Team
Uncategorized Artificial Intelligence in Cybersecurity

Deepfake Threats in Cyber Security

Deepfake technology poses significant risks, including reputational damage, financial loss, and unauthorised access to sensitive information. This involve the use of artificial intelligence (AI) to cr

Read article
• Turtledove Cyber Team
Uncategorized Cyber Essentials Certification Process

Enhancing School Cyber Security

The Importance of IASME Cyber Essentials In today's digital world, schools and teaching establishments in the UK are increasingly reliant on technology for delivering education, managing administrativ

Read article
• Turtledove Cyber Team
Cyber Essentials Affordable Cybersecurity Solutions

How IASME Cyber Essentials Can Protect Your SME

The sources describe various cybersecurity standards and frameworks relevant to small and medium-sized enterprises (SMEs). Among these, the IASME Cyber Essentials scheme stands out as particularly sui

Read article
• Turtledove Cyber Team
Uncategorized Access Control

Keeping User Accounts in Check

In the intricate web of cybersecurity, safeguarding data is tantamount to protecting your own digital identity. One fundamental aspect of this protective shield is the management of user privileges –

Read article
• Turtledove Cyber Team
Uncategorized Avoiding Tax Scams

Scammed by the HMRC

HMRC is cautioning small business owners to be vigilant for scams as the Self-Assessment deadline nears. Over the 12 months leading up to January 2024, the tax authority received over 207,800 reports

Read article
• Turtledove Cyber Team
Cyber Essentials Cyber Security

Smishing – Don’t Fall for the Trap! Bolster Cybersecurity with Cyber Essentials

In today's interconnected world, mobile devices have become an integral part of our personal and professional lives. Unfortunately, with this increased reliance on smartphones comes the rising threat

Read article
• Turtledove Cyber Team
Uncategorized AI Telephone Fraud

Telephone Scamming – Use a Safe Phrase

If a friend or family member contacted you requesting money, would you truly doubt whether it’s them? Their voice is familiar, yet something feels off. This is when having a Safe Phrase could prove us

Read article
• Turtledove Cyber Team
Uncategorized Cyber Attacks

The Devastating Impact of Cyber Attacks: How IASME Cyber Essentials Certification Offers Protection

<p>Cyber Essentials can help companies identify their vulnerabilities and ensure the necessary security policies, processes and controls are implemented.</p>

Read article
• Turtledove Cyber Team
Uncategorized Antivirus Software

The Importance of Keeping Antivirus Software Updated

In today's ever-connected business landscape, the laptop has become the cornerstone of productivity. Providing employees with the flexibility to work from anywhere, laptops are powerful tools that hel

Read article
• Turtledove Cyber Team
Uncategorized Cyber Essentials Certification

The Insider Threat: When Your Own Team Becomes the Weakest Link

Picture this: Sarah, a long-standing employee at a thriving marketing firm, clicks on an innocent-looking email attachment. Within minutes, the company's entire network is compromised, client data is

Read article
• Turtledove Cyber Team
Uncategorized Cyber Essentials

Understanding Cyber Essentials, IASME, and More: Strengthening Your Digital Defence

Introduction In an increasingly digitized world, the importance of cybersecurity cannot be overstated. With the rise of cyber threats, organizations are actively seeking ways to fortify their digital

Read article
• Turtledove Cyber Team
Uncategorized Account Separation

What To Expect With Our Cyber Essentials Plus Assessment

The IASME Cyber Essentials Plus certification is a comprehensive assessment designed to help organisations prevent cyber threats by following a set of fundamental cybersecurity practices. It is built

Read article
• Turtledove Cyber Team
Uncategorized 2FA Security

Why 2FA is a pain in the arse….

While two-factor authentication (2FA) is generally considered a valuable security measure to protect accounts, it can sometimes be perceived as inconvenient or frustrating for users. If like me you so

Read article
• Turtledove Cyber Team
Company News Cybersecurity

Welcome to the New Turtledove Cyber Website

We're excited to launch our new website built with modern technology for better performance, security, and user experience.

Read article