Purpose and scope
The website provides general editorial information about scoping cyber resilience consulting engagements. It does not provide individual security, legal or regulatory advice, independent certification, an incident response retainer or a guarantee of compliance. Decisions about systems, contracts and reporting obligations require assessment of your circumstances by appropriately qualified people.
Reading a guide, preparing an email or receiving general correspondence does not create a consultancy engagement, professional adviser relationship or obligation to deliver work. Any separately agreed services would require their own written terms defining scope, responsibilities and fees. References to ISO, NIST, NCSC and other bodies describe their published work and do not imply endorsement or affiliation.
Your obligations
You may use the site for lawful reading, research and internal discussion. You must not attempt unauthorised access, interfere with the site's operation, introduce malicious code, evade security restrictions or use the contact route to send unlawful, abusive or misleading material. Security guidance does not authorise testing systems that you do not own or have express permission to assess.
When contacting us, provide information you are entitled to share and avoid unnecessary personal or confidential material. The contact form creates an email draft rather than transmitting a server submission. You are responsible for reviewing the draft and sending it through your own email application. We do not promise delivery by that application or a response within a particular period.
Intellectual property and external material
Original website text, design and code are owned by or licensed to the publisher, except where another rights holder is identified. You may read, link to and retain reasonable extracts for personal or internal business reference with attribution. Wider republication, commercial redistribution or use suggesting our endorsement requires permission unless applicable law permits it.
Standards, institutional names and third-party publications remain subject to their owners' rights. Summaries on this site do not replace the complete source documents or grant rights to reproduce them. External links are provided for reference. We do not control linked content, its availability or its privacy practices, and a link does not constitute approval of all material on the destination site.
Availability and liability
We aim to provide useful material but do not warrant that every passage is complete, error-free or suitable for a particular organisation. Requirements and external resources can change. Check primary sources and obtain suitable advice before relying on information for consequential decisions. Site access may be interrupted, altered or withdrawn for maintenance, security or operational reasons.
To the extent permitted by law, we exclude implied warranties and liability for business losses arising from use of, or inability to use, this free editorial site, including lost profits, business interruption and indirect loss. Nothing excludes or limits liability for death or personal injury caused by negligence, fraud, fraudulent misrepresentation or any liability that cannot lawfully be excluded. Mandatory consumer rights remain unaffected.
Restriction, changes and disputes
We may restrict access where reasonably necessary to address misuse, security threats or a material breach of these terms. You may stop using the website at any time. Provisions concerning intellectual property, liability and dispute handling continue where their nature requires it. Revised terms will appear on this page and apply prospectively; they do not retrospectively remove accrued rights.
These terms are governed by the law of England and Wales. Subject to mandatory consumer protections and applicable jurisdiction rules, the courts of England and Wales have jurisdiction. Consumers may retain rights to bring proceedings in their home jurisdiction where the law provides. Please first describe a complaint to [email protected] so that we can consider an appropriate resolution. The publisher's registered correspondence address appears below.