NCSC Cloud Security Principles

This repository contains a static export of the NCSC Cloud Security Principles as individual, well-formatted Markdown files, suitable for reference, documentation, or further processing.

Version Information

• Published: 17 November 2018
• Reviewed: 7 June 2023
• Version: 2.1

Index of Principles

1. Data in transit protection
2. Asset protection and resilience
3. Separation between customers
4. Governance framework
5. Operational security
6. Personnel security
7. Secure development
8. Supply chain security
9. Secure user management
10. Identity and authentication
11. External interface protection
12. Secure service administration
13. Audit information and alerting for customers
14. Secure use of the service

Directory Structure

• principles/ — Contains one Markdown file per principle, with YAML frontmatter and clean GitHub-flavored formatting.
• download_ncsc.py — Script to fetch and regenerate the Markdown files from the NCSC API (optional, not required for static use).

Usage

You can browse or use the Markdown files directly. To regenerate or update the files, run:

python download_ncsc.py

License

This repository is a static export for reference and research. The content is subject to the Open Government Licence v3.0 (OGL 3.0). Please refer to the NCSC website for the latest official guidance and licensing information.