Tag: cyber essentials scheme

  • What is the difference between Cyber Essentials & Cyber Essentials Plus?

    What is the difference between Cyber Essentials & Cyber Essentials Plus?

    difference between CE & CE plus

    Are you interested in achieving a Cyber Essentials certification but unsure as to what level of certification is best for you? In this blog, we break down the main differences between Cyber Essentials & Cyber Essentials Plus. As well as offer recommendations for which level of certification businesses should consider.

    Let’s recap what Cyber Essentials is

    As mentioned in our previous blogs, Cyber Essentials is a government-backed scheme aimed to protect businesses from 80% of the most common cyberattacks. There are 2 levels of certification that we will discuss later; Cyber Essentials & Cyber Essentials Plus. Certification must be renewed annually and cover 5 main areas of checks. Businesses who have a Cyber Essentials certification not only can be assured they comply with the latest cybersecurity measures but also have a clearer picture of their company’s cyber security level.

    So, what is Cyber Essentials?

    This is the basic level of certification. Achieving Cyber Essentials involves the completion of a self-assessment questionnaire. This questionnaire involves 8 sections and has a total of 70 questions. Here at The Unite Group, we can provide support before taking the assessment to ensure all expected standards are met. As well as providing assistance throughout the application. Upon completion, the business owner or board-level representative must then sign a declaration that all answers are completed correctly. This is then reviewed by a Cyber Essentials assessor and successful applicants will receive their certification.

    Who do we recommend Cyber Essentials to?

    We recommend the Cyber Essentials certification to all businesses who want to demonstrate that they take cybersecurity seriously. Having this certification can also open new doors for business opportunities as it is a requirement to bid for Government contracts. We recommend this to smaller corporations that want to ensure they are complying with recommended safety measures.

    Now let’s compare this with Cyber Essentials Plus

    The Cyber Essentials Plus certification involves the same first steps as the Cyber Essentials scheme. Therefore, meaning they both include the completion of the self-assessment questionnaire. However, Cyber Essentials Plus then goes on to further include a vulnerabilities assessment and an on-site assessment. The assessment covers the controls your organisation has in place. As well as, your employee’s work-from-home locations. Also assessing any third parties who may have access to your premises or IT infrastructure. These assessments are undertaken by a trained and qualified Cyber Essentials Plus assessor.

    Who do we recommend the Cyber Essentials Plus scheme to?

    Here at The Unite Group, we recommend this scheme to those businesses that want to demonstrate higher levels of cybersecurity protection. Whilst Cyber Essentials is a great starting point, the added levels of assessment included in this scheme increase a business’s protection far more. Those who hold a Cyber Essentials Plus certification can bid for Ministry of Defence contracts.

    Recap

    To recap, the main difference between the two schemes is that the Cyber Essentials Plus certification covers more areas of assessment. It includes a more rigorous test of an organisation’s cybersecurity systems. Experts carry out vulnerability tests and as a result, ensure organisations are well protected against basic hacking and phishing attacks. Therefore, we strongly recommend this option to businesses who want to ensure they best protect their data and that of their customers.

    Let us help!

    Here at The Unite Group, we can guide you through Cyber Essentials and help you protect your business. We have in-house Cyber Essentials assessors to not only approve certifications but also provide support throughout the application process. We are a friendly voice on the other end of the phone to support you through the certification from start to end.

    To find out more, book a quick call with our team today!

  • What is the Cyber Essentials scheme?

    What is the Cyber Essentials scheme?

    Let’s breakdown the Cyber Essentials scheme.

    Now that we’ve covered the basics of Cyber Essentials in our latest blog let’s dive deeper into exactly what the scheme entails. How long it is valid for. As well as how we can support your business as you work through achieving the certification. It is very important your business achieves the cyber essentials certification. 61% of certified organisations say they are more likely to choose suppliers with Cyber Essentials or Cyber Essentials Plus certification.

    Cyber Essentials Scheme: Overview

    The Cyber Essentials scheme is an ISAMW self-assessment questionnaire process. The questionnaire will then be signed off by a member of the board or an equivalent signory. After this, it is then verified by a certification body trained and licensed to certify against the Cyber Essentials scheme (like ourselves here at The Unite Group). It is important before applying you ensure your organisation meets all the requirements. This includes having evidence ready to be provided to prove you meet the requirements.

    What is in the scope for Cyber Essentials?

    The scope will be agreed upon between your organisation and The Unite Group, (as your certification body), before the assessment begins. Certification can apply to your full organisation’s enterprise IT or just a subset.

    How long is Cyber Essentials Valid for?

    All certificates are valid for 12 months. They must be renewed annually, much like your cars MOT. This works well to ensure your organisation is protected against the latest cyber-attacks. As those carrying out attacks are constantly looking for new ways to catch out and successfully breach data. If you do not reapply for your Cyber Essentials Certification as the 12-month period expires, you will no longer be able to apply for contracts that require you to hold a valid Cyber Essentials certification – like Government contracts.

    What is in the Cyber Essentials certification scheme?

    The Cyber Essentials scheme covers 5 main areas:

    Access control.

    Having managing access to administrator accounts means you can protect who has access to your data and services.

    Software Updates

    Staying current with the latest software updates and security patches protects you against the newest cyber-attacks and vulnerabilities.

    Firewalls & Routers

    Creating a buffer-zone’ between your IT network and other external networks. This will ensure incoming traffic is analysed to find out if you would like to allow it access to your network.

    Secure Configuration

    Choosing the most secure setting for your device and software. As well as changing passwords and removing unused accounts and software will reduce the risk of a potential cyber-attack.

    Malware Protection

    Using properly configured anti-malware software will protect against viruses and other malware risks. This also includes to only allow trusted applications to run.

    How long does it take between submitting the online questionnaire to receive your certificate?

    The length of time it takes from application to certification can vary. Some may be verified in one or two days. Whereas, others may take around two weeks to complete the assessment. This is dependent upon your current security setup and speed of action. Those who partake in the Cyber Essentials Plus scheme should expect a longer assessment period as it involves the internal security assessment as well as an external scan.

    How can we support you through the Cyber Essentials process?

    Here at The Unite Group, we can provide support to you throughout the process. We are an authorised certificate issuing body for Cyber Essentials. As a result, we can manage the entire process for you from the initial audit, remedial works, and certificate issue.

    Do you want peace of mind that your defences will protect you from a large amount of the most common cyber-attacks? Contact us today and our friendly, knowledgeable team will be happy to explain in more detail the Cyber Essentials certification process or help you take the first steps to achieve your Cyber Essentials Certification!