Andrew A explains what’s new in a significant update to the NCSC’s flagship cloud guidance.