top of page

10 Steps to Cyber Security

​

To provide assurance that your organisation is operating appropriate security controls, the 10 Steps to Cyber Security can help you gain confidence that you are getting the basics right to protect your organisation. In the event of a security breach, it is important that you can demonstrate that your organisation took necessary steps to prevent such an incident from occurring.

​

Produced by the National Cyber Security Centre, part of GCHQ, the 10 Steps provide excellent advice on the absolute minimum set of controls you should have in place to protect yourself in cyber-space.

​

Originally published in 2012, this guidance is used by the majority of FTSE350 organisations and remains as relevant today as it did on its release.

​

Many headline-making security incidents and data breaches happen as a result of fundamental control failures, so regardless of the size of your organisation, be it enterprise or start-up, the controls stipulated should be considered mandatory to make sure you stay in business.

​

How we can help

​

We have developed a framework to assess organisations against the requirements stipulated within the 10 Steps to Cyber Security.

​

  • The outcome of the assessment is reported with an easy to digest RAG status for each of the stipulated controls allowing you to home in on the areas of concern quickly and easily;

  • Context is provided in non-technical language of the purpose and importance of each control, so that senior executives can understand their value;

  • The risks of not having any of the security controls in place are clearly articulated, providing you with information needed, to allow you and your senior executives to make an informed decision on whether or not to support their implementation.

​

​

​

​

​

​

​

​

© 2018 - 2019 The Practical CISO All rights reserved.

tThe Practical CISO Limited

Registered in England and Wales at the above address. Number: 10243165

​

VAT Registration Number: 245365403

bottom of page