Cyber Essentials

Cyber Essentials

The Security Standard for SME Businesses

Cyber Essentials scheme has been developed as part of the UK’s National Cyber Security Programme and in close consultation with industry. 

The Cyber Essentials certification is open to all companies from SME’s to large corporates, but is mandatory for government contracts where the supplier is providing ICT services or handling personal information.

One of the main objectives of the UK Government’s National Cyber Security Strategy is to make the UK a safer place to conduct business online and as of the 1st October 2014, all suppliers bidding for government contracts which involve the handling of sensitive and personal information, and the provision of certain technical products and services, must be Cyber Essentials accredited. The Cyber Security Essentials scheme provides businesses with information on essential cyber security practice. By focusing on the basics, your organisation will be better protected from the most frequent cyber threats.

The Two Levels of Cyber Essentials

Cyber Security Essentials

Requires the organisation to complete a self-assessment questionnaire, with responses independently reviewed by an external certifying body. 

Cyber Essentials Plus

Involves tests of the systems which are carried out by an external certifying body, using a range of tools and techniques.

Cyber Essentials documents are FREE to download and any organisation can use the guidance to implement essential security controls, but some organisations want or need to gain independent assurance that they have fully deployed the controls.

Thats where we help our clients with preparation for assessments. Our team is able to run through and offer guidance on the questionnaire, and conduct an assessment of your controls to make sure you are compliant. 

Organisations that have been successfully independently assessed or tested through the Scheme’s assurance framework will attain a Cyber Essentials certification badge. This will help demonstrate to partners or clients that your company takes cyber security seriously, and allows your company to advertise the fact that it adheres to a government-endorsed standard. 

CYBER MANAGEMENT ALLIANCE IS A CYBER ESSENTIALS CERTIFIED COMPANY.