What is Cyber Essentials?
Cyber Essentials is an affordable and comprehensive cyber security framework designed to protect organisations from the most common internet-based attacks. Its requirements focus on five primary areas, or Key Controls: Firewalls, Secure Configuration, User Access Control, Security Update Management, and Malware Protection.
The certification is available in two levels. Cyber Essentials certification is a prerequisite for pursuing Cyber Essentials Plus.
- Cyber Essentials: an online verified self-assessment that helps you align your organisation’s current security posture to the Cyber Essentials standard. Certification must be renewed annually.
- Cyber Essentials Plus: an audit verifying that the requirements of the standard are in place. This process includes a vulnerability scan, desktop audits, and email filter testing. Certification must be renewed annually.