How operators of critical national infrastructure (CNI) can use NCSC guidance and blogs to secure their internet-facing services.