Guidance on countering digital threats.
What to do, in what order, and where to turn. Every guide is dated and sourced.
- G1The first 24 hours after a deepfake of you or your companyFor people and small companies targeted by a fake video, audio clip or image. An ordered checklist to preserve evidence, avoid spreading the fake, and use the routes that can actually help.
- G2How to check a suspicious video, voice message or callFor anyone who has received a doubtful recording or call, including journalists. A short method that works without special tools and treats any tool result as one input, not a verdict.
- G3Voice clones and fake calls: a protocol for families and finance teamsFor families and finance teams. Two short protocols you can agree in advance and rehearse, so that verifying through another channel becomes automatic.
- G4AI security checklist for small organisationsFor small businesses and NGOs that use third-party AI tools or build small features on top of them. A checklist mapped to the OWASP LLM Top 10 and the NIST framework. It is not a certification.
- G5Agentic AI: least privilege and human approval checklistFor teams piloting AI agents, meaning systems that send emails, edit files, call APIs or spend money on their own. A checklist to work through before you let an agent act.
- G6Protecting your accounts and digital identityFor everyone. The highest-return actions come first: a second login step, passwords, account recovery and protection against impersonation. Email is the master key to everything else.
- G7Cyber preparedness minimum for NGOs and SMEsFor small organisations without a security team. Ten items on one printable page: backups, a second login step, updates, staff awareness and a plan for when something goes wrong.