Part of Data Security Standard 6 - Responding to incidents
Blocking web malicious content (6.2.5)
There should be a mechanism to scan and block malicious content on web pages. This can be at the network level with internet traffic going through a web proxy, utilising the NCSC’s Protective DNS (PDNS) service which blocks malicious domains or through your own blacklisting.
Using the NHS Secure Boundary solution which implements both of these measures is recommended for NHS organisations.
Alternatively blocking can occur at the browser level with an add on that blocks malicious content in the browser. This is generally the least favoured option in all but the smallest of organisations due to its general lack of central management.
Last edited: 8 October 2025 9:53 am