Resources
A small collection of useful, authoritative references and practical tools for Linux, infrastructure and cybersecurity.
Linux & Server Security
- CIS Benchmarks – recognised configuration and hardening guidance for operating systems and other technologies.
- Lynis – an open-source auditing and hardening tool for Linux and Unix systems.
- Red Hat Security Documentation – official security and administration documentation for Red Hat Enterprise Linux.
UK Cybersecurity Guidance
- NCSC Small Business Guide – practical cybersecurity guidance for smaller organisations.
- NCSC guidance for small and medium-sized organisations – advice and guidance from the UK’s National Cyber Security Centre.
- Cyber Essentials – the UK government-backed scheme covering a basic set of technical security controls.
Security Frameworks & Standards
- CIS Critical Security Controls – a prioritised set of practical security controls.
- NIST Cybersecurity Framework – a widely used framework for managing and communicating cybersecurity risk.
- ISO/IEC 27001 – the international standard for information security management systems.
Using These Resources
External references are provided as starting points for further research. No single framework, benchmark or tool is appropriate for every environment.
The most useful approach is normally to understand the problem first, then select the guidance or tooling that is appropriate to the systems, risks and operational constraints involved.
External sites and documents may change over time. Where a reference is important to a particular decision, consult the current version published by the relevant organisation.