Advancing UK Aerospace, Defence, Security & Space Solutions Worldwide
  • Home
  • /
  • Security
  • /
  • NCSC and CPNI offer joint security strategy to data centre operators and users

Security

NCSC and CPNI offer joint security strategy to data centre operators and users

The National Cyber Security Centre (NCSC) and the Centre for the Protection of National Infrastructure (CPNI) have jointly issued guidance to help UK’s data centres stay secure, so that for the first time data centre operators will have access to tailor-made advice on how to keep the UK’s online assets secure.

Image courtesy NCSC

The new guidance from the National Cyber Security Centre (NCSC) – a part of GCHQ – and the Centre for the Protection of National Infrastructure (CPNI) helps users and operators of data centres understand and mitigate potential security vulnerabilities.

Data is one of the UK’s most valuable assets, and it underpins almost all facets of modern life. However, this can make data centres an attractive target for threat actors, both physically and in cyberspace.

Advertisement
Teledyne

The new guidance sets out a holistic security strategy which encourages owners and users to consider how:

  • location and ownership of a data centre can affect who has access to sensitive information or affect strategic operating decisions
  • cyber threat actors continuously evolve their methodology to breach defences
  • strong physical security can mitigate covert and forceful entry to data assets
  • employees are critical to an effective security culture

NCSC Technical Director Dr Ian Levy said: “Operators and users of data centres have a clear responsibility to protect the data that they hold and process – failing to do this poses a massive financial, reputational and, in some cases, national security risk.

“Owning these responsibilities means understanding the array of methods that malicious actors could use to compromise a data centre both physically and digitally.

“I urge operators and users of data centres to consult this joint guidance and adopt the holistic security strategy it recommends.”

The Head of CPNI said: “Data centres and the data they hold are invaluable to the UK’s economy, security and prosperity. Threat actors constantly seek to evolve their methods to exploit any weaknesses in data infrastructure security, often concurrently.

“To minimise the risk of a breach it is critical that data centre security is viewed holistically with physical, people and cyber security risks considered with other factors such as where in the world infrastructure is located.

“By doing so, data centre owners and users can better safeguard their customer’s data, their business operations and keep the UK’s digital infrastructure running.

“In this period of stark geopolitical uncertainty, there is no better time than now for data centre operators and users to read the full guidance and make sure they’re best protected.”

For more information, users and operators of data centres should visit the CPNI website: www.cpni.gov.uk/data-centre-security

Advertisement
ODU RT

For broader advice on configuring, deploying and using cloud services securely, people can consult the NCSC’s existing cloud security guidance

 

 

 

 

 

Advertisement
General Atomics LB
Serco appoints Keith Williams as Chair

Aerospace Defence Security Space

Serco appoints Keith Williams as Chair

4 July 2025

Serco has appointed Keith Williams to the Board as a Non-Executive Director and Chair designate.

Boeing appoints Stephen Parker as CEO of BDS

Defence Security Space

Boeing appoints Stephen Parker as CEO of BDS

3 July 2025

Boeing has appointed Stephen (Steve) Parker as president and chief executive officer of its Defense, Space & Security (BDS) business, effective immediately.

Lancashire aims at advancing cyber-enabled defence and security

Defence Security Events

Lancashire aims at advancing cyber-enabled defence and security

3 July 2025

Over 200 senior business leaders, investors, policymakers and academics from across the UK gathered this week at the Lancashire Cyber Festival to discuss Lancashire’s opportunity to become a global leader in cyber-enabled defence and security.

Airframe Designs aligns with US NCAMP standards

Aerospace Defence Security

Airframe Designs aligns with US NCAMP standards

3 July 2025

Airframe Designs has aligned its material systems with the US National Centre for Advanced Materials Performance (NCAMP) which works with the Federal Aviation Administration (FAA) and industry partners to support its existing testing processes.

Advertisement
Leonardo RT
Bernd Kögel to spearhead launch of DSEI Germany

Defence Security Events

Bernd Kögel to spearhead launch of DSEI Germany

3 July 2025

Clarion Events Defence and Security has announced the appointment of Colonel (ret) Bernd Kögel as Managing Director of DSEI Germany, effective 1st October 2025.

Siemens and NVIDIA team to drive AI in advanced manufacturing

Aerospace Defence Security

Siemens and NVIDIA team to drive AI in advanced manufacturing

2 July 2025

Siemens and NVIDIA are expanding their partnership to accelerate the next era of industrial AI and digitalisation, towards enabling the factory of the future.

Advertisement
Teledyne