There are two levels of certification that an organisation can achieve:
Cyber Essentials
This certification is based on a self-assessment questionnaire, which is submitted to an accredited certification body for review and certification.
Cyber Essentials Plus
Cyber Essentials Plus builds on the standard Cyber Essentials certification by requiring an accredited certification body to independently test and verify that the required technical controls have been implemented effectively.
Who Needs It?
From 1 October 2014 the UK government requires all suppliers bidding for certain sensitive and personal information handling contracts to be certified against the Cyber Essentials scheme.
What You Provide
- Info about your systems and data
- Participation in meetings
- Some simple security improvements
Our Support Includes
- Access to ISOvA dashboard if needed
- Templates for risk, assets, access, and incidents
- End-to-end support with jargon-free advice
Implementing the requirements of the Cyber Essentials scheme helps establish strong information security governance and demonstrates a proactive approach to protecting your organisation against common cyber threats. Even if certification is not a contractual or customer requirement, adopting the Cyber Essentials controls is considered best practice and can significantly improve your overall cyber resilience.
Cyber Essentials Scheme Consultants
Our Information Security Consultants can help you understand your current level of compliance by assessing which Cyber Essentials controls are already in place and identifying any gaps. We will then produce a clear, practical roadmap to help you implement the remaining technical and procedural controls required for certification.
Once all the required controls have been implemented, we can support you throughout the certification process by working with an accredited Certification Body to achieve either Cyber Essentials or Cyber Essentials Plus, depending on your business requirements.
For organisations looking to further strengthen their information security management, we can also help you progress towards internationally recognised standards such as ISO 27001, enabling you to build a comprehensive and continually improving information security management system.