Craig, National Cyber Security Centre (NCSC)

Craig is a qualified programme and change manager, with over two decades experience supporting internal colleagues and external organisations to transition to new ways of working. Since January 2019 he has been working collaboratively with several internal teams and external organisations, including the LGA, SOCITM and WARPs, to support 408 UK councils to make it difficult for illegitimate emails to be sent from their domains.

The NCSC continues to develop its Mail Check tool, which is free to use by the public sector. Mail Check makes it harder for attackers to spoof domains by helping the public sector to set up and maintain good Sender Policy Framework (SPF), Domain Keyes Identified Mail (DKIM) and Domain-based Message Authentication, Reporting and Conformance (DMARC). The partners are campaigning for organisations to protect all their domains, including parked ones and where they use online email such as Microsoft O365 and Google G Suite.