Ideas, guidance & white papers
A little clarity.
A lot of cyber.
Practical reading for the people making security decisions.
Prime Contractors & UK Supply Chain Cyber Security - A new whitepaper from Turtledove Cyber
Turtledove Cyber's new white paper argues UK prime contractors hold the key to supply chain cyber resilience. The infrastructure to act already exists.
Read articlePasskeys: An Easier Login Is Already on Your Device
Passkeys beat passwords on security, speed, and convenience. Savva joined BBC Breakfast alongside the NCSC to explain why — and what it means for your Cyber Essentials certification.
Read articleCyber Essentials is Changing in April 2026: What You Need to Know About the Danzell Question Set
Cyber Essentials gets a ‘refresh’ every year. Most of the time the changes are modest, and organisations that treat the scheme seriously rather than as a box-tick exercise barely notice the difference
Read articleYou are the supply chain, we are the supply chain, they are the supply chain.
‘Supply chain’ is a renewed focus for threat intelligence, government interests, and enterprise this year. The statistics continue to show that there is a clear focus by criminals to compromise organi
Read articleFirewall Fundamentals: The Cyber Essential requirements to consider
Firewalls are a cybersecurity fundamental that should be in place for all businesses and organisations, regardless of size and shape. They serve as a filter at the entry and exit points of your device
Read articleWindows 10 End-of-Life: A Cyber Essentials Compliance Guide
A bit of a dry one this week, but as the end of life for Windows 10 is right around the corner, we wanted to make sure we’ve put out a reminder for any organisations that haven’t started taking steps.
Read articleThe correct approach to cybersecurity: What it means to be a ‘full stack’ consultancy.
It’s definitely a bit contentious to say that there’s a correct approach to cybersecurity. While there certainly comes a point where security decisions consist of forked paths of strategic direction a
Read articleShadow AI: The problem you’ve already got and what to do about it.
Modern AI promises to revolutionise how we work, automating tedious tasks like data entry, proofreading, and spreadsheet management. While it's an excellent time to invest in workplace AI, new solutio
Read articlePentesting: What do we ask you when we scope for a pentest?
Penetration testing is a security workpiece that can often feel a bit mysterious or confusing – especially for teams undertaking their first security assessment. The combination of a subject matter yo
Read articleSetting scope – What you need to know about the secret sixth control of Cyber Essentials
In our journey as a certification body – we take time to meet with a lot of smaller teams who are still trying to figure out exactly what the journey for IASME Cyber Essentials and Cyber Essentials Pl
Read articleCommunication-Centred Security Training: Integrating Policy and Awareness
Going to get a bit reflective in this one! Most organisations treat policy development and security awareness training as separate exercises – and often regard them as separate functions entirely. Pol
Read articleCyber Essentials Plus Checklist: What to Ask Your MSP or IT Provider Before CE Certification
Getting ready for Cyber Essentials (CE) or Cyber Essentials Plus (CE+) certification is almost always a fact-finding mission. Inevitably you discover blind spots in coverage or uncover gaps in coverag
Read articleIASME’s new Cyber Assurance update is a cybersecurity roadmap in disguise
IASME just dropped the May 2025 update to Cyber Assurance which is now on V7.0, and if you’re happy to think a bit conceptually you'll find that this is a really useful resource for developing or impr
Read articleCyber Essentials Willow Update 2025: Complete Guide to the Changes
The new Cyber Essentials update is here, and everyone is combing through changes thinking about how it might affect their new or yearly effort to badge up to either Cyber Essentials or Cyber Essential
Read articleProtecting Your Nonprofit After Microsoft’s 2025 Business Premium License Changes
A curve ball is heading for nonprofits in the coming months as Microsoft announces the removal of the free MS365 Business Premium licenses from their charitable offerings. This change will change the
Read articleDeciding on Penetration Testing: Understanding existing NCSC Guidance and Qualifications
Conversations around quality assurance are vital when we're talking about picking a team to support your organisation with cybersecurity. All too often, not knowing exactly what to ask of providers is
Read articleDSTL’s New ‘Secure by Design’ Problem Book: How industry can rise to meet ongoing challenges – and the solutions we carry with us already.
Last week, the Defence Science and Technology Laboratory (DSTL) recently released their "Secure by Design Problem Book," highlighting critical challenges in implementing security-by-design principle
Read articleVulnerability Management for everyone: Why Per-Device Scanning Doesn’t Have to Break the Bank
In today's increasingly hostile digital landscape, vulnerability management isn't just for the big players anymore. Small and medium-sized businesses (SMBs) are rapidly recognizing this reality— with
Read articleEnsuring the Skies Stay Open
The Vital Role of Business Continuity Planning and ISO 22301, post the UK fault at National Air Traffic Services. In today's interconnected world, businesses across all industries depend heavily on ef
Read articleLeveraging an Electronic Information Security Management System
In the ever-evolving digital landscape, organisations are facing increasingly sophisticated threats to their data security. Information Security Management System (ISMS) is a comprehensive framework d
Read articleUnderstanding IASME Cyber Essentials Plus
Where cyber threats are increasingly sophisticated, businesses must prioritise robust security measures to protect sensitive data and maintain compliance with industry standards. One such standard gai
Read articleAchieve Cyber Essentials Certification with Our Support
Cybercrime can have a devastating impact. At worst, it can cause a company to suffer significant financial losses, reputational damage, and disruptions to their day-to-day operations. It’s therefore v
Read articleBeware the Shadow Within: The Cyber Insider Threat
In my previous life as the Manager of the North West Regional Organised Crime Unit (ROCU) Cyber Crime Team, my team dealt with many serious and significant cyber attacks and cyber incidents. None were
Read articleBYOD – The Cyber Security Challenges When Staff Use Their Own Devices.
While BYOD can enhance flexibility and productivity, it introduces risks that businesses need to address to ensure the safety of their sensitive data. Let's dive into some of the key challenges faced
Read articleCharity Cyber Essentials Awareness Fortnight 6th – 17th November 2023
Charities are sitting on a data treasure trove. Valuable information on beneficiaries, supporters and volunteers as well as invoice and payment details can be sold by cyber criminals and used to ident
Read articleCyber Essentials has changed!
The NSCS and Government approved Cyber Essentials scheme provided by IASME has recently changed and the new ‘Montpellier’ version 3.1 is now in effect. Read our blog to see how this provides even more
Read articleDanger Lurking on Social Media: Catfishing on LinkedIn and How to Stay Secure
In an era predominantly driven by digital interactions, social media platforms have become essential for many aspects of our professional lives. LinkedIn, a popular network for professionals, offers t
Read articleEverything You Need To Know About Cyber Essentials Certification
No matter the size of an organisation or the industry you work in, cybersecurity is an important issue. So, what exactly is Cyber Essentials Certification, and why does it matter to your business? Put
Read articleFortify Your Small Business
In an increasingly digital world, small businesses are more reliant on technology than ever before. While this has brought numerous benefits, it has also exposed them to a growing number of cybersecur
Read articleHints & Tips for your Cyber Essentials Assessment
For some organisations Cyber Essentials certification scheme requirements can be challenging. Here are some common pitfalls explained and suggestions in how to avoid them.
Read articleIASME Cyber Essentials – Configuration Controls
Enhancing Cybersecurity with IASME Cyber Essentials: A Focus on Configuration Controls Introduction:
Read articleInnovative Cybersecurity Solutions For Businesses In The UK
Want to demonstrate your company’s commitment to cybersecurity? Achieving certification in Cyber Essentials is one of the best ways to signify to clients and stakeholders that you’re equipped for the
Read articleKeep Your Wits About You While Shopping Online.
Unfortunately, we all know someone who has been affected by an online scam. Don't become a victim.
Read articleSafeguarding Office 365 “HTML” Attachments – Combatting the Latest Phishing Trend
As cybercriminals continuously innovate their techniques, a new phishing trend has emerged, targeting Office 365 users through HTML attachments. This alarming trend has heightened the need for robust
Read articleTackling Cyber Crime in the UK Legal Sector
Safeguarding Trust and Confidentiality
Read articleThe Importance of Operating System Updates for increased Cyber Security
Keeping your operating system (OS) updated with the latest security patches is an essential best practice in today's cybersecurity landscape. However, despite its critical importance, many organisatio
Read articleThe Transport & Logistics Industry and the Indispensable Benefits of IASME Cyber Essentials Certification
Advancing the Transport Industry: The Indispensable Benefits of IASME Cyber Essentials
Read articleUnveiling the Benefits of IASME Cyber Essentials for Remote Workforces
With the rise of remote work, it is crucial for organisations to prioritise cybersecurity to protect sensitive data and maintain business continuity. One effective way to achieve this is by implementi
Read articleWhat is Cyber Essentials?
Cyber Essentials is an effective, Government backed scheme that will help you to protect your organisation from common cyber attacks.
Read articleWhy Organisations Still Need Cyber Essentials Certification, Even If They Have ISO27001
ISO/IEC 27001 is the International Information Security Standard, so how does Cyber Essential weight up
Read articleCongratulations to our Lead Assessor
Savva Pistolas is the Lead Assessor for Turtledove Cyber; a qualified penetration tester with years of experience providing hands-on support to small and medium enterprises. He's also an ISO 27001 Lead Implemente
Read articleNavigating the Shadows – Fake Conferences
Academic and professional landscapes have evolved tremendously; however, alongside these advancements, a problematic trend has emerged: the onslaught of spam email invites to predatory conferences. Th
Read articleUnlocking Cyber Safety
Welcome to our latest blog relating to IASME Cyber Essentials. This scheme helps organisations, especially smaller businesses, protect themselves from common cyber threats. Today, we will cover the fi
Read articleChinese Domain Name Scam
The China domain name registration scam, initially reported in 2010, continues to be perpetrated by con artists. Despite being widely recognised, these fraudsters are still devising means to deceive u
Read articleCyber Essentials Plus Pre-Audit Checklist
Pre-audit checklist to ensure a smooth onsite audit Ensure you have obtained your Cyber Essentials certification within 3 months of this Cyber Essentials Plus audit. A consent form will be required pr
Read articleDeepfake Threats in Cyber Security
Deepfake technology poses significant risks, including reputational damage, financial loss, and unauthorised access to sensitive information. This involve the use of artificial intelligence (AI) to cr
Read articleEnhancing School Cyber Security
The Importance of IASME Cyber Essentials In today's digital world, schools and teaching establishments in the UK are increasingly reliant on technology for delivering education, managing administrativ
Read articleHow IASME Cyber Essentials Can Protect Your SME
The sources describe various cybersecurity standards and frameworks relevant to small and medium-sized enterprises (SMEs). Among these, the IASME Cyber Essentials scheme stands out as particularly sui
Read articleKeeping User Accounts in Check
In the intricate web of cybersecurity, safeguarding data is tantamount to protecting your own digital identity. One fundamental aspect of this protective shield is the management of user privileges –
Read articleScammed by the HMRC
HMRC is cautioning small business owners to be vigilant for scams as the Self-Assessment deadline nears. Over the 12 months leading up to January 2024, the tax authority received over 207,800 reports
Read articleSmishing – Don’t Fall for the Trap! Bolster Cybersecurity with Cyber Essentials
In today's interconnected world, mobile devices have become an integral part of our personal and professional lives. Unfortunately, with this increased reliance on smartphones comes the rising threat
Read articleTelephone Scamming – Use a Safe Phrase
If a friend or family member contacted you requesting money, would you truly doubt whether it’s them? Their voice is familiar, yet something feels off. This is when having a Safe Phrase could prove us
Read articleThe Devastating Impact of Cyber Attacks: How IASME Cyber Essentials Certification Offers Protection
<p>Cyber Essentials can help companies identify their vulnerabilities and ensure the necessary security policies, processes and controls are implemented.</p>
Read articleThe Importance of Keeping Antivirus Software Updated
In today's ever-connected business landscape, the laptop has become the cornerstone of productivity. Providing employees with the flexibility to work from anywhere, laptops are powerful tools that hel
Read articleThe Insider Threat: When Your Own Team Becomes the Weakest Link
Picture this: Sarah, a long-standing employee at a thriving marketing firm, clicks on an innocent-looking email attachment. Within minutes, the company's entire network is compromised, client data is
Read articleUnderstanding Cyber Essentials, IASME, and More: Strengthening Your Digital Defence
Introduction In an increasingly digitized world, the importance of cybersecurity cannot be overstated. With the rise of cyber threats, organizations are actively seeking ways to fortify their digital
Read articleWhat To Expect With Our Cyber Essentials Plus Assessment
The IASME Cyber Essentials Plus certification is a comprehensive assessment designed to help organisations prevent cyber threats by following a set of fundamental cybersecurity practices. It is built
Read articleWhy 2FA is a pain in the arse….
While two-factor authentication (2FA) is generally considered a valuable security measure to protect accounts, it can sometimes be perceived as inconvenient or frustrating for users. If like me you so
Read articleWelcome to the New Turtledove Cyber Website
We're excited to launch our new website built with modern technology for better performance, security, and user experience.
Read article