# Security Playbooks

> Practical, step-by-step cyber security guides from Cyber Data Services, covering certification, incident response, hardening, and compliance.

## Playbooks
- [Cyber Essentials Certification Guide](https://cyberdataservices.uk/playbooks/cyber-essentials-certification-guide) (markdown: https://cyberdataservices.uk/playbooks/cyber-essentials-certification-guide.md)
  A practical route to UK Cyber Essentials certification: the five controls, the evidence to prepare, and how to pass first time.
- [Microsoft 365 Security Hardening](https://cyberdataservices.uk/playbooks/microsoft-365-security-hardening) (markdown: https://cyberdataservices.uk/playbooks/microsoft-365-security-hardening.md)
  Practical configuration steps to secure a Microsoft 365 tenant against the attacks we see most often.
- [Ransomware Incident Response](https://cyberdataservices.uk/playbooks/ransomware-incident-response) (markdown: https://cyberdataservices.uk/playbooks/ransomware-incident-response.md)
  The first actions to take when ransomware hits: contain it, preserve evidence, notify the right people, and recover safely.
- [Phishing Simulation Programme](https://cyberdataservices.uk/playbooks/phishing-simulation-programme) (markdown: https://cyberdataservices.uk/playbooks/phishing-simulation-programme.md)
  How to design and run phishing awareness campaigns that change behaviour without punishing people.
- [GDPR Data Breach Response](https://cyberdataservices.uk/playbooks/gdpr-data-breach-response) (markdown: https://cyberdataservices.uk/playbooks/gdpr-data-breach-response.md)
  How to meet the 72 hour reporting window and your duties under UK GDPR after a personal data breach.
- [Zero Trust Implementation Guide](https://cyberdataservices.uk/playbooks/zero-trust-implementation-guide) (markdown: https://cyberdataservices.uk/playbooks/zero-trust-implementation-guide.md)
  A staged route from perimeter based security to a Zero Trust architecture built around identity.
- [Business Continuity Planning](https://cyberdataservices.uk/playbooks/business-continuity-planning) (markdown: https://cyberdataservices.uk/playbooks/business-continuity-planning.md)
  How to keep the business running during a major cyber disruption, and recover in a planned order.
- [Entra ID Conditional Access Setup](https://cyberdataservices.uk/playbooks/entra-id-conditional-access-setup) (markdown: https://cyberdataservices.uk/playbooks/entra-id-conditional-access-setup.md)
  Set up access policies in Microsoft Entra ID, formerly Azure AD, without locking yourself out.
- [Supply Chain Security Assessment](https://cyberdataservices.uk/playbooks/supply-chain-security-assessment) (markdown: https://cyberdataservices.uk/playbooks/supply-chain-security-assessment.md)
  How to assess and manage the cyber risk that third party suppliers and vendors bring with them.

---
Source: https://cyberdataservices.uk · Cyber Data Services (trading name of Tom Sykes Ltd, company no. 06947397), part of the Stiperstone Group.
General information only, not specific security or legal advice. For guidance on your own systems, contact info@cyberdata.services or 01952 972 404.