Practical cyber security guides
Choose an assessment, prepare for an incident, use threat intelligence or document your learning with original examples and clear next steps.
Start with the decision you need to make. These guides support the work around security: agreeing a scope, interpreting evidence, assigning an action and checking the result. Clearly labelled worked examples show how a method works. Fictional organisations keep operational examples separate from real systems, while documentary reviews identify the actual public sources examined.
Choose your starting point
| Your next task | Start here | Take something away |
|---|---|---|
| Work out which assessment will answer your question | Security testing | A scope, provider questions, a prioritised findings list and a retest record. |
| Prepare people to make decisions during an incident | Incident response | Responsibilities, a triage log, an exercise and an action register. |
| Turn a report or indicator into a defensible decision | Threat intelligence | A specific requirement, a confidence judgement and a validated action. |
| Build skills and explain what you have learned | Careers and learning | A project record, research notes and useful conference follow-up. |
A useful sequence for security testing
Begin with assessment types. Define the business question before comparing suppliers. Use scoping and authorisation to agree boundaries, then choose a provider against those needs. Once work is complete, read the report, prioritise remediation and retest the changes.
A useful sequence for incident preparation
Write a response plan that names decision owners and workable communication routes. Rehearse it with a tabletop exercise. Use the exercise to find missing authority, unavailable evidence and unclear dependencies before a real incident forces the issue. Close the loop with a review and action register.
Put the guidance to work
The resource collection includes blank working versions and completed fictional examples. Read them in the browser, print a copy or download an editable file. There is no account or submission step.
The guides are educational reference material. They do not authorise testing, replace an organisation's own procedures or establish compliance. Apply them with the people who own the relevant assets, decisions and risks. Sources and editorial dates appear on each article; our editorial policy explains how claims and examples are handled.