Tag: cyber essentials

BBC, Boots, and BA: A Day of Cyber Breaches Shakes Public Confidence

With 3 huge cyber breaches hitting the headlines yesterday for some of the country’s largest companies, we must treat this as a reminder to ensure your business is protected.

Introduction

In the digital age, cyber security breaches have become an unfortunate reality for organisations worldwide. Yesterday, the British Broadcasting Corporation (BBC), Boots, and British Airways (BA) experienced significant cyber breaches. Highlighting the vulnerability of even the most prominent institutions. This blog will delve into the details of these breaches, their implications, and the growing need for robust cyber security measures in today’s interconnected world.

BBC’s Data Leak

Yesterday, the BBC fell victim to a data leak. This resulted in the exposure of sensitive information belonging to millions of users. The breach compromised usernames, email addresses, and potentially even passwords. This incident raises concerns about the security of user data and underscores the importance of stringent security protocols.

As one of the most trusted news sources globally, the BBC’s reputation has taken a hit. Users rely on the organisation for reliable information, and a breach of this magnitude shakes public confidence. This incident serves as a wake-up call for the BBC and other media organisations to reassess their cyber security practices and implement stronger protective measures.

Boots Pharmaceutical’s Customer Data Breach

In a separate incident on the same day, Boots, a leading pharmacy chain, experienced a significant cyber breach that compromised customer data. Personal information, including names, addresses, and even medical history, was potentially exposed. With over 2,500 stores across the United Kingdom, Boots serves millions of customers. This breach affects a vast number of individuals.

The breach raises concerns about the potential misuse of sensitive medical information, leading to identity theft and other fraudulent activities. Customers who trust Boots with their private details now face an uncertain future. The incident highlights the need for enhanced cyber security measures within the healthcare sector, where the stakes are particularly high due to the sensitivity of the data involved.

British Airways’ Cyber Attack

Adding to the day’s unfortunate events, British Airways suffered a cyber attack resulting in unauthorised access to customer accounts. The breach exposed personal and financial information, potentially compromising credit card details of thousands of individuals. British Airways, a prominent airline, has faced previous cyber security incidents, and this breach further erodes public confidence in its ability to protect customer data.

The airline industry operates within a highly regulated framework and is entrusted with vast amounts of passenger information. Breaches like this not only affect individuals but also have broader implications for the aviation sector as a whole. Rebuilding trust in the industry will require swift action, robust security measures, and transparent communication with affected customers.

The Growing Need for Strong Cybersecurity Measures

The cyber breaches experienced by the BBC, Boots, and British Airways illustrate the ongoing challenge organisations face in safeguarding sensitive data. As technology advances, cybercriminals find increasingly sophisticated methods to exploit vulnerabilities. It is essential for companies to adopt proactive cyber security strategies to protect user information effectively.

Organisations must invest in state-of-the-art security infrastructure, regularly update software and systems, and conduct comprehensive audits to identify potential weaknesses. Training employees to recognise and respond to cyber threats is equally crucial. Collaboration between the public and private sectors, sharing threat intelligence, and implementing best practices can strengthen the collective defence against cyberattacks.

So, how does this act as a reminder to protect your business?

These attacks have highlighted how no business is too big, or small, to fall victim to an attack. Here at The Unite Group, we recommend Microsoft Premium to our customers as a first step to protecting their business. Microsoft Premium offers robust cyber protection to individuals and organisations, equipping them with advanced security features and tools. With Microsoft Premium, users benefit from enhanced email and file protection, including advanced threat detection and remediation capabilities.

The service provides real-time monitoring and alerts for potential cyber threats, allowing users to proactively address security vulnerabilities. Additionally, Microsoft Premium offers multi-factor authentication, ensuring an extra layer of security for user accounts. The service also includes secure cloud storage and backup options, protecting valuable data from loss or unauthorised access. With its comprehensive suite of cybersecurity features, Microsoft Premium empowers users to safeguard their digital assets and maintain peace of mind in an increasingly interconnected world.

Moreover, having a Cyber Essentials certification is another recommendation we suggest businesses put in place. Cyber Essentials is a recognised and widely adopted cyber security standard designed to help organisations mitigate common cyber risks and demonstrate their commitment to safeguarding sensitive data. It provides a baseline framework of security controls that organisations can implement to protect against prevalent cyber threats. To learn more about Cyber Essentials, click here.

Conclusion

The cyber breaches at the BBC, Boots, and British Airways highlight the pervasive nature of cyber threats and the need for continuous vigilance in protecting sensitive data. These incidents have far-reaching consequences for both the affected organisations and the public’s trust in their ability to secure personal information. As technology evolves, organisations must adapt and invest in robust cyber security measures to mitigate risks and maintain public confidence. Only through collective efforts can we build a safer digital landscape for the future.

If you would like to find out more about the cyber security measures we can put in place for your business, contact our team today!

Let’s prevent the risk of your business falling victim to such an attack.

June 6, 2023
Creating Strong Passwords – World Password Day – 4th May 2023
Introduction

Today we join the celebrations of World Password Day by reminding you of the dangers of not using strong passwords. As well as, sharing top tips to create strong passwords. The internet is a dangerous place. That’s why we all need to be more careful about how we handle our online security. Strong passwords are your first line of defense against cybercrime and they’re actually pretty easy to create! So come along as we dive into the world of strong passwords and see how you can protect yourself from hackers in just five easy steps.

Be aware of the latest threats

You should also be aware of the latest threats and how they affect you. The first step is to stay up to date on new developments in password security, which can be done by following actively checking the National Cyber Security Centre website. Or by speaking with your IT support provider, such as our team here at The Unite Group.

The consequences of being unaware of the latest threats are dire: if your password is compromised because it was too easy to guess or crack, then all your accounts could be hacked as well! This could result in identity theft or even financial loss.

Use different passwords for each service you use
- Use a password manager to store all of your passwords.
- Use different passwords for each service you use.
- Don’t use the same password for two services, even if they’re related (for example, don’t use the same password for both Facebook and Instagram).
- Don’t use your email address or name as a password (it’s too easy to guess).
- Don’t use common words that could be found in any dictionary–especially when those words are part of something personal about yourself (like your birthday).
Use a password manager to manage your passwords

A password manager is a tool that stores your passwords, often in an encrypted format. The benefit of using one is that it can create strong passwords for you and then remember them for each website or service you sign up for. This way, all your passwords are unique and significantly harder to crack than if they were all the same.

You should use a password manager on all your devices so that any device has access to the same data without having to enter it manually each time (which could lead to forgetting). Most password managers also allow users to store credit card details or other sensitive information securely in case someone gets hold of their device somehow – this makes recovering from this kind of breach much easier!

Use a unique and long password for each account

The most important thing you can do to protect your accounts is to use a unique, long password for every account. If you’re having trouble remembering all of your passwords and login information, try using a password manager as mentioned above.

We recommend using a range of numbers, symbols and both uppercase and lowercase letters within your password to create a complex password. Shorter passwords also become easier to guess, so try to ensure your passwords are always over 8 characters long.

Don’t use dictionary words or personal information in passwords
- Avoid dictionary words, personal information, and other common passwords.
- Don’t use the same password for multiple accounts.
- Don’t create passwords that are easy to guess (such as your birthday or pet’s name).
Strong passwords are your first line of defense against cybercrime

Strong passwords are your first line of defense against cybercrime. A strong password is hard to guess and easy to remember, which makes it much harder for someone else to steal your identity or break into your accounts.

Let’s recap top tips to create a strong password that’s both secure and memorable:
- Use a password manager
- Use different passwords for each service you use, even if they’re all from the same company (e.g., Facebook, Gmail)
- Make sure your passwords are at least 8 characters long
- Change your passwords regularly (e.g. every month)
Conclusion

As you can see, there are many ways to create strong passwords. The most important thing is to use different passwords for each service you use and make sure they are unique and long. You should also use a password manager to help manage all of your passwords so that they are safe even if you get hacked by cyber criminals!

If you would like to learn more about measures you can put in place to best protect your business from falling risk to cybercrime, visit our cyber security blog archive or speak to our experienced team today!
May 3, 2023
Cyber Security Misconceptions
Introduction

Cyber security misconceptions are real. It is a topic that’s been in the news a lot recently. You might have heard about hackers, data breaches, ransomware and so on. The topic might seem complicated and scary, but it doesn’t need to be! If you want to learn more about cyber security and dispel some of the myths surrounding it then keep reading!

A firewall is enough

Firewalls are not enough, they are not a panacea. They can be circumvented and evaded, as well as outdated and outmaneuvered by hackers who know how to exploit them.

A firewall is only as good as its ability to keep attackers out, so if you think your company’s firewall alone will protect it from cyber criminals then you’re in for a rude awakening when they get inside your system anyway–and possibly worse: since many attacks happen through email or social media channels, it’s possible that no one would even notice if someone got through!

The hacker is always a criminal

Not all hackers are criminals. In fact, many are motivated by curiosity or a desire to help others.

Some hackers may be motivated by profit and not know that their actions are illegal.

Hackers are always in your network
- Hackers are not always in your network.
- Hackers can be anywhere in the world, and they don’t even need to be on your network to cause damage.
- If a hacker has access to your computer through malware, he or she can use it as a proxy–a remote control device that allows him or her to manipulate information on that computer from afar.
Hacking is easy

Hacking is not always easy. In fact, it can be quite difficult. Hackers are often portrayed as criminals who break into networks and steal sensitive information. However, there are many other types of hackers with different motivations.

In most cases, hacking requires knowledge about how computers work and how to exploit their vulnerabilities. Hacking can also include social engineering techniques that allow a hacker access to systems through human interaction instead of just technology alone.

Data breaches are the norm

Data breaches are not the norm, but they do happen. If you’re reading this article, it’s likely that you already know that data breaches are a big problem for businesses and individuals alike. Data breaches can have serious consequences for businesses–if their customers lose trust in them because of a breach, they may lose revenue as well and suffer other ill effects as well. Data breaches can also have serious consequences for individuals: if your personal information is stolen by an attacker who uses it to commit identity theft or some other crime against you (such as phishing), then your life will be turned upside down while the authorities try to sort out what happened and whether there was anything they could have done differently to prevent it from happening at all!

Cyber security is not as simple as it seems.

Cyber security is a complex area of study. It requires a lot of knowledge and experience, as well as resources and time.

Many people think that cyber security is something they can do on the side while they are working at their day job or going to school full-time. However, this is not true! Cyber security requires constant attention and vigilance in order to keep your data secure at all times; if you aren’t able to commit yourself fully then it’s best not even starting down this path in the first place

Conclusion

In conclusion, there are a lot of cyber security misconceptions. In fact, cyber security can be quite complicated and difficult to understand. But with proper education and awareness, we can all work together to make sure our networks are safe from hackers!

Here at The Unite Group, we are holding a free webinar – Webinars on Wednesday 29th March at 2 pm to give you more information on how you can keep your business safe.
March 22, 2023
We celebrate Safer Internet Day!
Today marks Safer Internet Day. This day promotes the responsibility of both adults and young people in creating a safer space online.

Each year, people from all over the world come together to spread awareness and celebrate Safer Internet Day.

In today’s day and age, people of all ages move towards a more digital way of life. From mobile phones to work laptops and gaming devices, electronic devices are intertwined with our daily lives.

Now more than ever, safe internet use and cybersecurity have never had such importance. So much of our personal and professional data can be accessed through the internet. This means internet safety and cyber security should be at the forefront of our minds.

Although technology keeps us entertained and makes our lives easier, it also has its complications.

Whilst individuals must follow best practices to protect themselves, businesses must do this to protect sensitive data. Safer Internet Day is a great opportunity to reflect on how we can all promote the responsible use of technologies.

Does your business operate on safe practices?

Horizon WIFI

Is your public WIFI secure?

As the provider of public WIFI, do you have the correct measures in place? If not, this could leave you accountable for any illegal or inappropriate activity on your account.

Horizon public WIFI is traceable. This means you can provide a public wireless solution to your customers with peace of mind you are fully protected. If someone looks at inappropriate material, you can provide this information to the authorities. Furthermore, using content filtering you can prevent these people from ever getting access.

Here at The Unite Group we offer safe public Wi-Fi solutions. Our Horizon public WIFI product is secure, intelligent, and perfect for direct marketing.

Visit our website to learn more about Horizon WIFI or contact us on 0191 466 1050.

Phishing Emails

It’s always important for both individuals and employees to be on the lookout for phishing emails. Phishing emails are categorised as a cybercrime that contacts its target via email. The sender uses this form of attack to gain and exploit personal or sensitive business information.

There are 3 types of phishing emails to look out for:

Spear phishing – an attempt directed at a particular individual or company.

Clone phishing – hackers use a legitimate, previously delivered, part of online correspondence to create almost identical emails.

Whaling – an attempt directed specifically at a senior executive or high-profile target within the business.

For businesses, it’s important to make sure employees are aware of phishing emails and how to spot them. As an individual, never click any links or give any personal information to a sender you are unsure of.

Weak Passwords

We understand that when it comes to creating a password, you want to make it something memorable. But if it’s easy for you to remember, it’s also easy for a hacker to guess.

A lot of people make their passwords something personal, for example, the name of a beloved family pet. However, we need to keep in mind that this information is easy to find. A lot of our personal information is easily accessible online via social media.

Strong passwords are essential in keeping private or sensitive data safe.

In the spirit of Safer Internet Day, why not double-check that your passwords comply with best practices?

We suggest you create strong passwords by following the below steps:
- Use a combination of upper-and lower case letters.
- Include numbers.
- Include special characters (symbols).
- Never include any personal information.
- Never use the same password for different applications.
- Ensure your passwords are at least 12 characters long.
Cyber Essentials

More now then ever cybersecurity is a vital part of any business. With cyber attacks happening more and more frequently it is essential to ensure you have the correct measures in place to protect your data.

We believe businesses should go the extra mile when it comes to cyber security. One way of doing this is to obtain the Cyber Essentials certification.

A foundation-level certificate protects your business from 80% of the most basic cyber security breaches.

You don’t need to be an experienced information security professional or have any technical knowledge to become Cyber Essentials certified; we can help! Our in-house qualified Cyber Essentials assessors are here to assist you throughout the entire process. Giving you peace of mind that you have protection against the most basic cyber threats.

Chat to our friendly team today to see what measures we suggest you put in place to protect your business.

Happy Safer Internet Day!
February 7, 2023
Let’s Breakdown Cyber Essentials
In this blog we breakdown the Cyber Essentials scheme. Explain why achieving the certification is important in simplistic terms – perfect to take straight into the next boardroom meeting. As well as, outline how simple it is to get started with achieving a Cyber Essentials certification.

Cyber Essentials

The Cyber Essentials certification is a UK government-backed scheme intended to provide organisations with a basic level of cyber security. The scheme is both accessible and achievable for all.

There are two levels of certification that businesses can choose from – Cyber Essentials and Cyber Essentials Plus.

Cyber Essentials involves completing a Cyber Essentials self-assessment questionnaire which one of our qualified assessors can assist with. The questionnaire outlines the 5 key areas of cybersecurity. Ensuring sufficient measures are in place to protect both yourself and your business from the risk of falling victim to cybercrime.

Cyber Essentials Plus, takes this certification a step further. Achieving this also requires the self-assessment questionnaire to be completed. However, it then goes further and includes a hands-on technical verification to be carried out.

All organisations should consider gaining a Cyber Essentials to not only protect themselves. But to demonstrate to their existing and future clients that they take data cybersecurity risks seriously!

How to explain Cyber Essentials to your boss

So, you’ve got to this point. You think gaining a Cyber Essentials certification would be a great step to protect your business. We couldn’t agree more! But now you need to stress the importance of this to your boss. Let us help!
Firstly, could your businesses continue to operate if you were to fall victim to one of the above statistics? We’re sure the answer is no! Therefore it is essential you put measures in place to best prevent an attack.

As well as this, it’s a great talking point when you are selling your business to potential customers. Who wouldn’t want to work with a company who can ensure the best protection for their data? As well as this, achieving the certification opens up the opportunity to work with the Government. And the Ministry of Defense (for Cyber Essentials Plus certifications only).

With our Cyber Essentials packages starting from just £800 and monthly payment options available, you can be sure this will be cheaper than the damage caused by the falling victim. With the certification lasting for 12 months, you can relax with peace of mind you have the correct measures in place. Annual renewal also ensures you remain up-to-date with the latest risks in the cybersecurity world. Because we all know cyber attacks are ever-evolving and becoming harder to spot and prevent year-on-year.

How to get started with Cyber Essentials

Getting started with a Cyber Essentials certification is easy! Simply use the booking form below to organise a quick chat with one of our qualified Cyber Essentials assessors. From there we can best advise which scheme is best for you. Our team will then guide you throughout the entire process. Ensuring you have the necessary measures in place. As well as supporting you with the assessment.

Becoming Cyber Essentials certified is easier than you think and could save your business from the unimaginable!

If you’d like to learn more about the process of Cyber Essentials visit our page by clicking here. Or alternatively, dive into our Cyber Essentials blog archive by clicking here!
February 2, 2023
Why become Cyber Essentials Certified?
Introduction

The Cyber Essentials certification program is a UK government initiative that helps to protect businesses and the public sector from cyber threats. It works by providing a set of technical standards that are essential to keep your systems secure, with the goal of protecting against common vulnerabilities and attacks. The certification is designed for companies of all sizes to demonstrate they take cyber security seriously.

What is Cyber Essentials?

Cyber Essentials is a government-backed scheme that helps companies protect themselves from cyber threats. The scheme was launched in 2011 and is designed to help businesses protect themselves against the most common cyber-attacks. Cyber Essentials is a basic level of security that all businesses should have in place!

Do I Need Cyber Essentials Certification?

Cyber Essentials is a certification that the UK Government requires for all organisations working with them and other public sector bodies. It also shows your commitment to cyber security, which can be useful if you’re looking for work in this area or want to demonstrate your expertise and knowledge.

If you are involved in any kind of digital service or system, then it’s worth considering achieving this certification as a way of demonstrating your understanding of cyber security principles and good practices.

What Does Cyber Essentials Certification Mean?

Cyber Essentials is an online training program that offers a baseline level of protection to your business. By taking the Cyber Essentials certification, you will learn about:
- How to protect your company from common security threats such as malware, viruses and phishing attacks.
- What steps are necessary to secure your company’s information and systems by implementing processes like password management, patching systems and setting up firewalls.
About Cyber Essentials Certification

Cyber Essentials is becoming increasingly important for companies when choosing other businesses to work with. This is because cyber attacks are on the rise, up 27.4% in 2022 when compared to the year previous. Therefore, companies are far more likely to work with a company that can demonstrate they are taking protection against this risk.

Likewise, those who suffered attacks often found it extremely time-consuming and it had a substantial effect on their business. Therefore, businesses should not only achieve a Cyber Essentials certification for their customer’s sake. But also to protect the longevity of their business.

You don’t need to be an experienced information security professional or have any technical knowledge in order to become Cyber Essentials certified; we can help! Our in-house qualified Cyber Essentials assessors are here to assist you throughout the entire process.

Takeaway: Protect your company!

You can take the steps to ensure that your company is protected from cyber threats. You can also learn how to protect your business from cybercrime, cyberterrorism, and other similar threats. The process of becoming Cyber Essentials Certified will help you do this by giving you the skills and knowledge needed to be a more effective defender of your company’s data assets.

Conclusion

Cyber Essentials Certification is a great way to get your company started with cybersecurity. It helps you get your employees up to speed on the basics of online security and teaches them how to recognise threats and protect against them. As well as this, it demonstrates to your customers that you take data protection seriously. Giving peace of mind that you have measures in place to best protect against the most basic cybercrimes.

Could you afford for your business to fall at risk of an attack? Sign up for a quick call with a member of our cyber essentials team to learn how we can help protect your business!
January 18, 2023
Why is Cyber Essentials important for SMEs?
In this blog, we cover why achieving a Cyber Essentials certification is important for SMEs.

Introduction

Cyber-attacks are among the biggest threats facing businesses today. While the threat of cyber-attacks is nothing new, they are becoming more frequent and more sophisticated. You might have heard about some of the high profile attacks on companies like Sony Pictures or Tesco Bank, but it’s important to understand that these large organisations have teams dedicated to cyber security who can invest significant resources into protecting their systems. For SMEs however, this type of investment is not always possible or practical – which is where cyber essentials come in!

Cyber-attacks are becoming more frequent

You may have noticed that cyber-attacks are becoming more frequent, both in terms of the number of attacks and the amount of damage they cause. The falling cost of cyber-crime is also a factor: criminals can now launch damaging web intrusions for less than £1000. As a result, businesses need to be vigilant about protecting their digital assets and complying with data protection laws such as GDPR.

Cyber-attacks can harm your reputation

Without a doubt, cyber-attacks can harm your reputation. If you’re unprepared or don’t have the right systems in place to prevent them, they can damage your brand and customer service. They could even affect the relationships you have with suppliers and customers.

The importance of Cyber Essentials certification is clear: it shows that your organisation has an effective approach to protecting customer data and information security.

Cyber-attacks often result in financial loss

Cyber-attacks on small and medium sized businesses can result in a range of financial loss, including:
- Loss of confidential information
- Loss of intellectual property
- Customer data stolen/lost (e.g., names, addresses and credit card details)
- Business reputation damaged due to the impact of cybercrime on customers’ trust.
- Financial assets lost as a consequence of criminal activity or fraud committed using stolen credentials.
Cyber-attacks are not just a security issue

Cyber-attacks are not just a security issue. They can lead to financial loss and harm your reputation, as well as the reputations of your customers. Cyber-attacks are becoming increasingly frequent:
- In the UK, cyber-crime costs business £27 billion per year.
- The average cost of a data breach is $3.62 million in North America and $3.45 million in Europe (according to Ponemon Institute’s “2017 Cost of Data Breach Study”)
If you’re an SME, having cyber essentials is vital

Cyber Essentials is a voluntary, self-certification scheme to help small and medium sized businesses protect themselves from cyber threats. It’s based on the five essential controls and recommended by industry bodies such as BCS, ISACA and CIPFA.

The Cyber Essentials scheme is endorsed by the National Cyber Security Centre (NCSC). The NCSC has introduced this framework for SMEs because it’s aware that smaller organisations are less likely to have in-house expertise or resources available for maintaining good cyber security practices.

Conclusion

If you’re an SME, cyber essentials are vital to protect both your brand and your bottom line. By implementing the best strategies for lessening the impact of cyber-attacks, you can ensure that your business is as safe as possible from these threats. And when it comes down to it, there’s no reason why SMEs shouldn’t be just as prepared as larger companies – after all, they face similar risks and need just as much protection!

Are you an SME looking to achieve a Cyber Essentials certification?

Why not arrange a free consultation with our team today where we can discuss in depth the Cyber Essentials process. As well as which certification would be needed to support your business. Use the booking system below to select a time that is convenient for you.
January 12, 2023
What are the 5 Cyber Essentials?

In this blog, we cover the 5 cyber essentials elements. The Cyber Essentials certification assessment covers all 5 of these areas. Certification can only be achieved if all 5 areas are in place within a business.

Cyber Essentials

As covered in previous blogs, Cyber Essentials is a Government backed scheme. Which aims to protect your business against 80% of the most common cyber threats & attacks. Here at The Unite Group, we are a Cyber Essentials awarding body. With in-house Cyber Essentials qualified assessors. Therefore we can provide support throughout the process. As well as complete the final assessment.

The 5 Cyber Essentials

The Cyber Essentials scheme can be broken down into 5 sections. Below we cover each and explain its importance. As well as its relevance in protecting you against cyber-attacks.

Secure Configuration

This involves ensuring all your devices are using the most secure settings and software. We all know it can be easy to forget to remove software or users you no longer use. However, this is extremely important! These simple changes can protect you again potential cyber-attacks. Such changes include simply changing your passwords regularly. As well as ensuring you only have the software you use on your devices. These measures are quick to do and efficient at protecting your data from being compromised.

Software Updates

Likewise, software updates are also a very effective way to protect your data. Therefore, the Cyber Essentials scheme ensures all devices carry out updates to ensure they stay up-to-date with the latest software. Software updates not only include new features. But also security patches that protect you against the newest cyber-attacks and vulnerabilities. Cyber Essentials cannot be achieved if all devices are not kept up to date on the latest updates.

Access Control

As part of the Cyber Essentials assessment, it covers who has access to your files. Within busy businesses, this is something than can be overlooked. However, it is very important! Are you sure only those who need access to your files can? Do all your staff really need access to the files they currently can? We recommend having managed access to an administrator account. This, therefore, means you can protect who has access to your data and services.

Firewalls & Routers

Furthermore, Firewalls & Routers also make up one of the Cyber Essentials. Firewalls are designed to protect businesses from users who are not authorised from gaining access. Therefore by having a firewall in place, you create a so-called ‘buffer zone between your IT network and any other external links. Having these measures in place allows you to analyse incoming traffic. Meaning you are in complete control of who has access to your account. This massively protects your business from hackers.

Malware Protection

Malware protection is the final key part of the Cyber Essentials scheme. Using properly configured anti-malware software will protect you from viruses and other malware risks. Anti-malware software will only allow trusted applications to run which reduces the risk of unsafe applications running in the background without you knowing.

With cyber-attacks on the rise, you can’t afford to not protect your business from cybercrimes!

Are you ready to take the first steps in achieving a Cyber Essentials Certification and protecting your business?

Why not arrange a free consultation with our team today where we can discuss in depth the Cyber Essentials process. As well as which certification would be needed to support your business. Use the booking system below to select a time that is convenient for you.

Alternatively, contact us today by giving us a call or dropping us an email.

January 3, 2023
Festive season cyber threats: Are you prepared?
Have you thought about the cyber threats your business could face this festive season?

Christmas is around the corner and most businesses are beginning to unwind and prepare for the festivities. Therefore, our minds are filled with presents, wrapping, and preparing the Christmas dinner. But as we begin to let our guards down, hackers are waiting on the sidelines for their perfect time to strike.

It’s easy to get swept away in the Christmas cheer. But just because we stop doesn’t mean the cyber threats do. In fact, our downtime is a hacker’s dream and as we slow down, they get ready to attack. Have you stopped to think about the cyber threats your business could face during the holiday season?

Not to worry. We’ve pulled together some things to think about during the most wonderful time of the year. We’re outlining a few of the main cyber threats you may face throughout the festive period. This means you can feel safe and enjoy the holidays with the confidence that your business is protected.

Phishing Emails

A phishing email is a cybercrime that contacts its target via email. The sender poses as a legitimate institution to lure individuals to hand over sensitive business information. This information is then exploited or used for financial gain.

There are 3 types of phishing emails to look out for:
- Spear phishing – an attempt directed at a particular individual or company.
- Clone phishing – hackers use a legitimate, previously delivered, part of online correspondence to create almost identical emails.
- Whaling – an attempt directed specifically at a senior executive or high-profile target within the business.
It’s important to make your employees aware of phishing emails and teach them how to spot them.

Weak passwords

It’s easy to fall into the trap of using the same passwords for multiple accounts. However, this can result in leaving the business open and vulnerable to cyber-attacks.

Amongst the hustle and bustle of the Christmas period, take some time to ask yourself the important question: Are your passwords secure?

Do they have the complexity to make it difficult for cyber criminals to breach?

Before locking up the office for Christmas, double-check that your passwords comply with best practices.

We suggest you create strong passwords by following the below steps:
- Use a combination of upper-and lower- case letters.
- Include numbers.
- Include special characters (symbols).
- Never include any personal information.
- Never use the same password for different applications.
- Ensure your passwords are at least 12 characters long.
Misconfiguration of Devices

When did you last configure all your devices? Is your firewall up and working properly?

It’s important to ask yourself these questions before getting wrapped up in all the festivities.

When cyber security software is updated or changed, misconfigurations become the most prevalent. This leaves your business vulnerable and open to a cyber-attack.

It is vital that your firewall is correctly configured and up to date to protect your business from hackers.

Before leaving for Christmas, double-check everything is updated and correctly configured. This means you can enjoy the holidays and have peace of mind that your business isn’t left vulnerable to cyber threats.

Cyber Essentials Certification

Here at The Unite Group, we understand the many cyber threats that businesses face day in and day out. We believe businesses should go the extra mile when it comes to cyber security. One way of doing this is to obtain the Cyber Essentials certification.

A foundation-level certificate protects your business from 80% of the most basic cyber security breaches.

The Cyber Essentials scheme covers 5 key areas of cybersecurity:
- Access Control
- Software Updates
- Firewalls & Routers
- Secure Configuration
- Malware Protection
The Unite Group is a certifying body of the cyber essentials scheme. If you would like to learn more about the Cyber Essentials certification, click here!

Keep an eye out in our newsroom for more blogs like this and be sure to keep an eye on our Facebook, LinkedIn, and Instagram for updates!
December 30, 2022
How can we provide Cyber Essentials support?

In this blog we talk through the guidance you can seek for Cyber Essentials support.

So, you’ve realised you need a Cyber Essentials certification but you are unsure where to start?

Well here at The Unite Group, we strongly recommend using a registered, qualified Cyber Essentials awarding body. Like our team here! This is because qualified assessors can guide you through the process to ensure your company completes the certification criteria correctly. By accessing Cyber Essentials support you are likely to achieve the certification much faster. Although you could go through the process without support, it is likely to be time-consuming for you. Instead, we recommend you seek Cyber Essentials support from experts who understand the rules and regulations. As well as how to apply them to a business.

What is a Cyber Essentials certification?

Before we dive into how to seek support through gaining the Cyber Essentials certification. Let’s first cover what the certification is. Cyber Essentials is a scheme that helps you guard your organisation against cyber attacks. It is a government-backed scheme to provide protection against the most common cyber-attacks.

There are two levels of certification that can be achieved.

Cyber Essentials

This is the most basic option. The assessment includes a self-assessment question. This certification gives peace of mind that you have the basic measures of protection in place. Click here to read more about this certification and how we can provide Cyber Essentials support.

Cyber Essentials Plus

This is a higher-level certification and demonstrates you are taking precautions against attacks. Achieving this certification includes the same self-assessment as Cyber Essentials as well as an external vulnerability scan & internal testing. Click here to read more about this certification.

Can you fail Cyber Essentials?

Yes! This certification requires an assessment and therefore it is possible to fail. However, if you are guided through the process by a qualified assessor this is unlikely. This is a further reason why we recommend seeking Cyber Essentials support.

A fail will incur further costs to re-sit the assessment. As well as any additional support you then seek in order to do so. Therefore having support from an awarding body, such as ourselves, right from the start can prevent any additional costs.

Do I need to renew Cyber Essentials?

Yes! Cyber Essentials certifications must be renewed annually to ensure all procedures are up to date. This also ensures you are protected against the latest types of cyber attacks.

Here at The Unite Group, you can take out our Cyber Essentials support on a monthly payment basis. Not only does this split the cost. This also means we will support you annually when you must renew your certification.

Our pricing for your managed Cyber Essentials certification is £800, this can be split into 10 payments of £80.

Cyber Essentials Plus starts at £1200, again this can be managed with 10 payments of £120.

Cyber Essentials support

As an awarding body with Cyber Essentials qualified assessors in-house. We can provide support throughout the whole process. From defining the scope right up to preparing for the examination. Our dedicated, friendly team is on hand to help wherever you require a little extra support.

Are you ready to take the first steps in achieving your Cyber Essentials certification?

Why not arrange a free consultation with our team today where we can discuss in depth the Cyber Essentials process. As well as which certification would be needed to support your business. Use the booking system below to select a time that is convenient for you.

Alternatively, contact us today by giving us a call today or dropping us an email.

December 9, 2022