What is IASME Cyber Assurance?
IASME Cyber Assurance is a comprehensive, flexible, and affordable framework that supports organisations to achieve and demonstrate cyber security resilience. Its requirements encompass a wide range of critical security and data protection measures and considerations, including risk management, personnel, and post-incident recovery.
The certification is available in two levels. Level 1 certification is a prerequisite for pursuing Level 2.
- Level 1: an online verified self-assessment that helps you align your organisation’s current security posture to the IASME Cyber Assurance standard. Certification must be renewed annually.
- Level 2: an audit of the organisation’s processes and policies, verifying that the requirements of the standard are in place. This audit involves interviews with members of staff and the reviewing of documentation and similar evidence. Certification must be renewed every three years.
Certification Prerequisite
To pursue and achieve IASME Cyber Assurance certification, you must have a current Cyber Essentials certificate (or IASME Cyber Baseline certificate, for organisations outside of the UK).
Please note:
- The scope of organisation that you are certifying to IASME Cyber Assurance must not be larger than the scope of your organisation that is covered in your Cyber Essentials or IASME Cyber Baseline certification.
- In order to purchase your IASME Cyber Assurance assessment, you must have at least one month left in date for your Cyber Essentials or IASME Cyber Baseline certification.