Tag: cyber security

Why become Cyber Essentials Certified?
Introduction

The Cyber Essentials certification program is a UK government initiative that helps to protect businesses and the public sector from cyber threats. It works by providing a set of technical standards that are essential to keep your systems secure, with the goal of protecting against common vulnerabilities and attacks. The certification is designed for companies of all sizes to demonstrate they take cyber security seriously.

What is Cyber Essentials?

Cyber Essentials is a government-backed scheme that helps companies protect themselves from cyber threats. The scheme was launched in 2011 and is designed to help businesses protect themselves against the most common cyber-attacks. Cyber Essentials is a basic level of security that all businesses should have in place!

Do I Need Cyber Essentials Certification?

Cyber Essentials is a certification that the UK Government requires for all organisations working with them and other public sector bodies. It also shows your commitment to cyber security, which can be useful if you’re looking for work in this area or want to demonstrate your expertise and knowledge.

If you are involved in any kind of digital service or system, then it’s worth considering achieving this certification as a way of demonstrating your understanding of cyber security principles and good practices.

What Does Cyber Essentials Certification Mean?

Cyber Essentials is an online training program that offers a baseline level of protection to your business. By taking the Cyber Essentials certification, you will learn about:
- How to protect your company from common security threats such as malware, viruses and phishing attacks.
- What steps are necessary to secure your company’s information and systems by implementing processes like password management, patching systems and setting up firewalls.
About Cyber Essentials Certification

Cyber Essentials is becoming increasingly important for companies when choosing other businesses to work with. This is because cyber attacks are on the rise, up 27.4% in 2022 when compared to the year previous. Therefore, companies are far more likely to work with a company that can demonstrate they are taking protection against this risk.

Likewise, those who suffered attacks often found it extremely time-consuming and it had a substantial effect on their business. Therefore, businesses should not only achieve a Cyber Essentials certification for their customer’s sake. But also to protect the longevity of their business.

You don’t need to be an experienced information security professional or have any technical knowledge in order to become Cyber Essentials certified; we can help! Our in-house qualified Cyber Essentials assessors are here to assist you throughout the entire process.

Takeaway: Protect your company!

You can take the steps to ensure that your company is protected from cyber threats. You can also learn how to protect your business from cybercrime, cyberterrorism, and other similar threats. The process of becoming Cyber Essentials Certified will help you do this by giving you the skills and knowledge needed to be a more effective defender of your company’s data assets.

Conclusion

Cyber Essentials Certification is a great way to get your company started with cybersecurity. It helps you get your employees up to speed on the basics of online security and teaches them how to recognise threats and protect against them. As well as this, it demonstrates to your customers that you take data protection seriously. Giving peace of mind that you have measures in place to best protect against the most basic cybercrimes.

Could you afford for your business to fall at risk of an attack? Sign up for a quick call with a member of our cyber essentials team to learn how we can help protect your business!
January 18, 2023
Why is Cyber Essentials important for SMEs?
In this blog, we cover why achieving a Cyber Essentials certification is important for SMEs.

Introduction

Cyber-attacks are among the biggest threats facing businesses today. While the threat of cyber-attacks is nothing new, they are becoming more frequent and more sophisticated. You might have heard about some of the high profile attacks on companies like Sony Pictures or Tesco Bank, but it’s important to understand that these large organisations have teams dedicated to cyber security who can invest significant resources into protecting their systems. For SMEs however, this type of investment is not always possible or practical – which is where cyber essentials come in!

Cyber-attacks are becoming more frequent

You may have noticed that cyber-attacks are becoming more frequent, both in terms of the number of attacks and the amount of damage they cause. The falling cost of cyber-crime is also a factor: criminals can now launch damaging web intrusions for less than £1000. As a result, businesses need to be vigilant about protecting their digital assets and complying with data protection laws such as GDPR.

Cyber-attacks can harm your reputation

Without a doubt, cyber-attacks can harm your reputation. If you’re unprepared or don’t have the right systems in place to prevent them, they can damage your brand and customer service. They could even affect the relationships you have with suppliers and customers.

The importance of Cyber Essentials certification is clear: it shows that your organisation has an effective approach to protecting customer data and information security.

Cyber-attacks often result in financial loss

Cyber-attacks on small and medium sized businesses can result in a range of financial loss, including:
- Loss of confidential information
- Loss of intellectual property
- Customer data stolen/lost (e.g., names, addresses and credit card details)
- Business reputation damaged due to the impact of cybercrime on customers’ trust.
- Financial assets lost as a consequence of criminal activity or fraud committed using stolen credentials.
Cyber-attacks are not just a security issue

Cyber-attacks are not just a security issue. They can lead to financial loss and harm your reputation, as well as the reputations of your customers. Cyber-attacks are becoming increasingly frequent:
- In the UK, cyber-crime costs business £27 billion per year.
- The average cost of a data breach is $3.62 million in North America and $3.45 million in Europe (according to Ponemon Institute’s “2017 Cost of Data Breach Study”)
If you’re an SME, having cyber essentials is vital

Cyber Essentials is a voluntary, self-certification scheme to help small and medium sized businesses protect themselves from cyber threats. It’s based on the five essential controls and recommended by industry bodies such as BCS, ISACA and CIPFA.

The Cyber Essentials scheme is endorsed by the National Cyber Security Centre (NCSC). The NCSC has introduced this framework for SMEs because it’s aware that smaller organisations are less likely to have in-house expertise or resources available for maintaining good cyber security practices.

Conclusion

If you’re an SME, cyber essentials are vital to protect both your brand and your bottom line. By implementing the best strategies for lessening the impact of cyber-attacks, you can ensure that your business is as safe as possible from these threats. And when it comes down to it, there’s no reason why SMEs shouldn’t be just as prepared as larger companies – after all, they face similar risks and need just as much protection!

Are you an SME looking to achieve a Cyber Essentials certification?

Why not arrange a free consultation with our team today where we can discuss in depth the Cyber Essentials process. As well as which certification would be needed to support your business. Use the booking system below to select a time that is convenient for you.
January 12, 2023
What are the 5 Cyber Essentials?

In this blog, we cover the 5 cyber essentials elements. The Cyber Essentials certification assessment covers all 5 of these areas. Certification can only be achieved if all 5 areas are in place within a business.

Cyber Essentials

As covered in previous blogs, Cyber Essentials is a Government backed scheme. Which aims to protect your business against 80% of the most common cyber threats & attacks. Here at The Unite Group, we are a Cyber Essentials awarding body. With in-house Cyber Essentials qualified assessors. Therefore we can provide support throughout the process. As well as complete the final assessment.

The 5 Cyber Essentials

The Cyber Essentials scheme can be broken down into 5 sections. Below we cover each and explain its importance. As well as its relevance in protecting you against cyber-attacks.

Secure Configuration

This involves ensuring all your devices are using the most secure settings and software. We all know it can be easy to forget to remove software or users you no longer use. However, this is extremely important! These simple changes can protect you again potential cyber-attacks. Such changes include simply changing your passwords regularly. As well as ensuring you only have the software you use on your devices. These measures are quick to do and efficient at protecting your data from being compromised.

Software Updates

Likewise, software updates are also a very effective way to protect your data. Therefore, the Cyber Essentials scheme ensures all devices carry out updates to ensure they stay up-to-date with the latest software. Software updates not only include new features. But also security patches that protect you against the newest cyber-attacks and vulnerabilities. Cyber Essentials cannot be achieved if all devices are not kept up to date on the latest updates.

Access Control

As part of the Cyber Essentials assessment, it covers who has access to your files. Within busy businesses, this is something than can be overlooked. However, it is very important! Are you sure only those who need access to your files can? Do all your staff really need access to the files they currently can? We recommend having managed access to an administrator account. This, therefore, means you can protect who has access to your data and services.

Firewalls & Routers

Furthermore, Firewalls & Routers also make up one of the Cyber Essentials. Firewalls are designed to protect businesses from users who are not authorised from gaining access. Therefore by having a firewall in place, you create a so-called ‘buffer zone between your IT network and any other external links. Having these measures in place allows you to analyse incoming traffic. Meaning you are in complete control of who has access to your account. This massively protects your business from hackers.

Malware Protection

Malware protection is the final key part of the Cyber Essentials scheme. Using properly configured anti-malware software will protect you from viruses and other malware risks. Anti-malware software will only allow trusted applications to run which reduces the risk of unsafe applications running in the background without you knowing.

With cyber-attacks on the rise, you can’t afford to not protect your business from cybercrimes!

Are you ready to take the first steps in achieving a Cyber Essentials Certification and protecting your business?

Why not arrange a free consultation with our team today where we can discuss in depth the Cyber Essentials process. As well as which certification would be needed to support your business. Use the booking system below to select a time that is convenient for you.

Alternatively, contact us today by giving us a call or dropping us an email.

January 3, 2023
Festive season cyber threats: Are you prepared?
Have you thought about the cyber threats your business could face this festive season?

Christmas is around the corner and most businesses are beginning to unwind and prepare for the festivities. Therefore, our minds are filled with presents, wrapping, and preparing the Christmas dinner. But as we begin to let our guards down, hackers are waiting on the sidelines for their perfect time to strike.

It’s easy to get swept away in the Christmas cheer. But just because we stop doesn’t mean the cyber threats do. In fact, our downtime is a hacker’s dream and as we slow down, they get ready to attack. Have you stopped to think about the cyber threats your business could face during the holiday season?

Not to worry. We’ve pulled together some things to think about during the most wonderful time of the year. We’re outlining a few of the main cyber threats you may face throughout the festive period. This means you can feel safe and enjoy the holidays with the confidence that your business is protected.

Phishing Emails

A phishing email is a cybercrime that contacts its target via email. The sender poses as a legitimate institution to lure individuals to hand over sensitive business information. This information is then exploited or used for financial gain.

There are 3 types of phishing emails to look out for:
- Spear phishing – an attempt directed at a particular individual or company.
- Clone phishing – hackers use a legitimate, previously delivered, part of online correspondence to create almost identical emails.
- Whaling – an attempt directed specifically at a senior executive or high-profile target within the business.
It’s important to make your employees aware of phishing emails and teach them how to spot them.

Weak passwords

It’s easy to fall into the trap of using the same passwords for multiple accounts. However, this can result in leaving the business open and vulnerable to cyber-attacks.

Amongst the hustle and bustle of the Christmas period, take some time to ask yourself the important question: Are your passwords secure?

Do they have the complexity to make it difficult for cyber criminals to breach?

Before locking up the office for Christmas, double-check that your passwords comply with best practices.

We suggest you create strong passwords by following the below steps:
- Use a combination of upper-and lower- case letters.
- Include numbers.
- Include special characters (symbols).
- Never include any personal information.
- Never use the same password for different applications.
- Ensure your passwords are at least 12 characters long.
Misconfiguration of Devices

When did you last configure all your devices? Is your firewall up and working properly?

It’s important to ask yourself these questions before getting wrapped up in all the festivities.

When cyber security software is updated or changed, misconfigurations become the most prevalent. This leaves your business vulnerable and open to a cyber-attack.

It is vital that your firewall is correctly configured and up to date to protect your business from hackers.

Before leaving for Christmas, double-check everything is updated and correctly configured. This means you can enjoy the holidays and have peace of mind that your business isn’t left vulnerable to cyber threats.

Cyber Essentials Certification

Here at The Unite Group, we understand the many cyber threats that businesses face day in and day out. We believe businesses should go the extra mile when it comes to cyber security. One way of doing this is to obtain the Cyber Essentials certification.

A foundation-level certificate protects your business from 80% of the most basic cyber security breaches.

The Cyber Essentials scheme covers 5 key areas of cybersecurity:
- Access Control
- Software Updates
- Firewalls & Routers
- Secure Configuration
- Malware Protection
The Unite Group is a certifying body of the cyber essentials scheme. If you would like to learn more about the Cyber Essentials certification, click here!

Keep an eye out in our newsroom for more blogs like this and be sure to keep an eye on our Facebook, LinkedIn, and Instagram for updates!
December 30, 2022
How can we provide Cyber Essentials support?

In this blog we talk through the guidance you can seek for Cyber Essentials support.

So, you’ve realised you need a Cyber Essentials certification but you are unsure where to start?

Well here at The Unite Group, we strongly recommend using a registered, qualified Cyber Essentials awarding body. Like our team here! This is because qualified assessors can guide you through the process to ensure your company completes the certification criteria correctly. By accessing Cyber Essentials support you are likely to achieve the certification much faster. Although you could go through the process without support, it is likely to be time-consuming for you. Instead, we recommend you seek Cyber Essentials support from experts who understand the rules and regulations. As well as how to apply them to a business.

What is a Cyber Essentials certification?

Before we dive into how to seek support through gaining the Cyber Essentials certification. Let’s first cover what the certification is. Cyber Essentials is a scheme that helps you guard your organisation against cyber attacks. It is a government-backed scheme to provide protection against the most common cyber-attacks.

There are two levels of certification that can be achieved.

Cyber Essentials

This is the most basic option. The assessment includes a self-assessment question. This certification gives peace of mind that you have the basic measures of protection in place. Click here to read more about this certification and how we can provide Cyber Essentials support.

Cyber Essentials Plus

This is a higher-level certification and demonstrates you are taking precautions against attacks. Achieving this certification includes the same self-assessment as Cyber Essentials as well as an external vulnerability scan & internal testing. Click here to read more about this certification.

Can you fail Cyber Essentials?

Yes! This certification requires an assessment and therefore it is possible to fail. However, if you are guided through the process by a qualified assessor this is unlikely. This is a further reason why we recommend seeking Cyber Essentials support.

A fail will incur further costs to re-sit the assessment. As well as any additional support you then seek in order to do so. Therefore having support from an awarding body, such as ourselves, right from the start can prevent any additional costs.

Do I need to renew Cyber Essentials?

Yes! Cyber Essentials certifications must be renewed annually to ensure all procedures are up to date. This also ensures you are protected against the latest types of cyber attacks.

Here at The Unite Group, you can take out our Cyber Essentials support on a monthly payment basis. Not only does this split the cost. This also means we will support you annually when you must renew your certification.

Our pricing for your managed Cyber Essentials certification is £800, this can be split into 10 payments of £80.

Cyber Essentials Plus starts at £1200, again this can be managed with 10 payments of £120.

Cyber Essentials support

As an awarding body with Cyber Essentials qualified assessors in-house. We can provide support throughout the whole process. From defining the scope right up to preparing for the examination. Our dedicated, friendly team is on hand to help wherever you require a little extra support.

Are you ready to take the first steps in achieving your Cyber Essentials certification?

Why not arrange a free consultation with our team today where we can discuss in depth the Cyber Essentials process. As well as which certification would be needed to support your business. Use the booking system below to select a time that is convenient for you.

Alternatively, contact us today by giving us a call today or dropping us an email.

December 9, 2022
Computer Security Day
Today marks National Computer Security Day.

This day demands our attention every year due to the shift to a more digital way of life. Although technology has enriched our lives, it has also left us vulnerable to data security issues and cyber-attacks.

It’s no secret that the introduction of electronic devices has made our lives easier. However, that doesn’t mean it comes without its complications.

This unofficial holiday reminds both people and businesses to stay on top of their computer security.

In this blog, we’ll share some tips on how to keep on top of computer security.

1. Create strong passwords

I’m sure we’ve all fallen victim to the memorable password of ‘Password123’ or ‘Password12345.’ Despite, this making life easier for us, it also makes you more vulnerable to cyber-attacks.

We suggest you create strong passwords by following the below steps:
- Use a combination of upper-and lower- case letters.
- Include numbers.
- Include special characters (symbols).
- Never include any personal information.
- Never use the same password for different applications.
- Ensure your passwords are at least 12 characters long.
2. Keep all software up to date

We’re fully aware of the painstaking amount of time it takes to update software. And we’re all guilty of clicking the little ‘X’ and leaving it to a later date. However, you are taking a serious risk every time you do this!

Software updates have multiple benefits and they all come down to protecting your computer security.

Software updates are specifically designed to strengthen the stability of any software and combat the latest viruses.

3. Ensure you have antivirus software in place

Having an antivirus software installed on your electronic device sounds like a no brainer and we agree with this notion.

Not having this could result in a slow device, or having important files damaged or deleted. To prevent this from happening, it is vital you have antivirus software installed.

Are you looking to download an antivirus software but don’t know where to start?

Our helpdesk team are on hand to help, contact us today!

4. Regularly backup your data

Ever spent hours on an important document but the file becomes corrupted?

This disheartening situation is easy to avoid if you regularly backup your data.

Here at The Unite Group, we recommend using the 3-2-1 approach for best practice:
- Make sure you have THREE copies of your data,
- On TWO different storage mediums,
- And with ONE off-site copy.
5. Cyber Essential Certification

Businesses should go the extra mile when it comes to cyber security. One simple way of doing this is to achieve the Cyber Essentials certification.

Cyber Essentials is a government-backed and industry-supported scheme that allows businesses to protect themselves from cyber-attacks.

A foundation level certificate protects your business for 80% of the most basic cyber security breaches.

The Cyber Essentials scheme covers 5 key areas of cybersecurity:
- Access Control
- Software Updates
- Firewalls & Routers
- Secure Configuration
- Malware Protection
The benefits of obtaining the Cyber Essentials certification:
- It prevents around 80% of cyberattacks.
- It presents you with new business opportunities and can boost your reputation,
- Demonstrate to your customers/clients that you take cybersecurity seriously.
- It provides you with the opportunity to work with the Government.
- Be listed on the NCSC’s database.
- Demonstrate your commitment to data protection.
Upon completion of Cyber Essentials, businesses are then presented with the opportunity to move on to Cyber Essentials Plus.

If you would like to learn more about the Cyber Essentials certification, click here!

Keep an eye on our newsroom for more blogs like this and be sure to keep an eye on our Facebook, LinkedIn and Instagram for updates!
November 30, 2022
Cyber Essentials vs ISO 27001

What is the difference between Cyber Essentials vs ISO 27001?

We often get asked by companies looking to strengthen their cybersecurity which is the better option Cyber Essentials vs ISO 27001. Here at The Unite Group we always stress how different the two schemes are and that they should not be compared but instead accepted as two very different schemes which both enhance a company’s security stance.

In this article, we discuss the two schemes and offer further information for any business looking to improve its cybersecurity.

Cyber Essentials

What is it?

The Cyber Essentials scheme is a Government backed scheme that covers 5 key areas of cybersecurity; access control, software updates, firewalls & routers, secure configuration & malware protection. The aim of this scheme is to protect against the most common forms of cyber-attacks. This certification is also required to bid for Government contracts.

What does it aim to protect?

By completing the Cyber Essentials certificate, your organisation is effectively protecting itself against approximately 80% of the most common cyber-attacks. This is because this scheme protects your data and programs on hardware such as computers, networks, servers and any other elements in your IT infrastructure.

Who should consider being a part of the Cyber Essentials scheme?

All organisations who want to protect their businesses should partake in the scheme. Not only does it protect your business. But it also demonstrates to your clients that they can be confident their data will be in safe hands. Therefore any business that is looking to implement basic cybersecurity measures should look into achieving the certification.

Also, for any businesses that wishes to bid for Government contracts this certification is a prerequisite. Therefore, if you wish for your business to be considered for such opportunities you should begin the process of achieving this as soon as possible.

ISO 27001

What is it?

ISO 27001 is a set of standards that have been designed to keep information assets secure. This certification allows you to manage the security of assets including financial information, intellectual property, employee details and any information entrusted to you from third parties. ISO 27001, therefore, has more elements within its scope. ISO 27001 has 10 clauses and 114 generic security controls grouped into 14 sections

What does it aim to protect?

ISO 27001 differs from Cyber Essentials as it aims to protect all information and data regardless of where it is found. Meaning the certification covers hard copies, digital & data stored within information systems.

Who should consider achieving ISO 27001?

Similarly to Cyber Essentials, any business that wishes to demonstrate that they take data protection seriously should work towards achieving the certification. Some organisations sometimes choose to implement the standard to ensure they are following recommended guidelines. Others however choose to complete the certification to reassure their customer’s and client’s.

So, is Cyber Essentials the same as ISO 27001?

In short, no. However, the two complement one another.

We recommend anyone without both a Cyber Essentials certification and ISO 27001 consider achieving both certifications at the same time. In terms of time & money, this proves to be the most effective.

However, if this is not an option, we suggest you opt for achieving Cyber Essentials first. This scheme follows a simpler process and will introduce you to the world of certification and data protection.

How can we help?

Here at The Unite Group, we are certified Cyber Essentials assessors. Therefore, we can guide you throughout the process as well as assess your application for certification. Our friendly team is on hand to assist throughout the self-assessment questionnaire.

Want to learn more? Book an appointment with our Cybersecurity team today!

November 8, 2022
Are your Microsoft 365 mailboxes backed up?
In today’s business world, email is the backbone of communication. Complete365 reports that Microsoft Office 365 Email is the most popular 365 product among medium-sized companies. Ontech claims emails contain 60% of business-critical data.

No doubt, emails are incredibly important, so having a robust system for storing your email data in case of catastrophe is a good idea. In fact, emails may contain sensitive information that shouldn’t be lost or destroyed under GDPR.

Most modern companies make regular backups of their most important data. Backing up data can make the difference between a salvageable error and a catastrophic one.

In this article, we’re going to discuss how to make sure that your Microsoft 365 mailboxes are backed up and protected for your benefit.

What is a backup?

Backups are copies of data stored in an alternate location that is accessible in the case of corruption, destruction or inaccessibility of the primary data.

The most traditional backup is the 3-2-1 backup, which ensures there are three versions of data – one is the primary and two backups. One backup should be stored offsite, and each should be stored on different media. This ensures that the original data is always accessible, even in the event of a catastrophe.

With the advent of cloud-based systems, UniTrends notes that the 3-2-1 system has become a 3-2-2 system, with a cloud-based copy serving as another ‘offsite’ backup.

In today’s modern workplace, the cloud plays an integral role in storing and protecting files and preventing data loss in the event of hardware failure.

Are Microsoft 365 mailboxes automatically backed up?

The Microsoft 365 platform does preserve your email to a certain extent, but it does not back it up. Microsoft 365 provides support for protection against major events affecting their data centres; physical and network security for data centres; privacy controls to protect users; and replication, redundancy, and storage of data.

Email data, however, is the responsibility of the enterprise if it is accidentally or maliciously deleted. That’s exactly why you should consider a mailbox backup solution.

Why does Microsoft not automatically back them up?

It is important to note that, when it comes to Microsoft 365, they operate on a model of Shared Responsibility.

This means Microsoft are not responsible for your data. Instead for the operation and infrastructure of Microsoft’s Global Infrastructure and systems as a whole.

Intuitively, this makes sense. Handling your backups is a big undertaking, so they avoid automatic backups. As a result, Microsoft is free to focus on providing you with the best service possible.

This does mean your mailboxes aren’t backed up by default. Microsoft also offers tools for archiving emails and files, and for restoring files and data after accidental or malicious deletion.

This means that anything haphazardly deleted can be recovered within a short period of time — if noticed within 14 days (adjustable up to a maximum of 30 days).

However, restoring files can be destructive. Data is restored to the same place, meaning that any additional data will be overwritten, with no rollback capabilities.

Once these temporary backups are overwritten or cleared, any important information that is stored on these emails will be lost forever. There are no redundancies.

Therefore, to keep your business emails secure, you should invest in a mailbox backup solution.

Why invest in a backup solution?

The importance of backups cannot be overstated when it comes to protecting and archiving your files, especially if they are stored in the cloud. We believe the best way to ensure your emails are kept safe is by investing in a cloud-based backup solution.

Here are some key benefits of a mailbox backup solution like Acronis:
- Avoid loss of productivity: Businesses use emails to share important information, communicate with clients and collaborate. Losing this information can destroy your productivity and lead to months of lost work. Moreover, a cloud solution cuts down your recovery time from a cyberattack or data loss – as you can quickly restore emails within a few clicks.
- Improved cybersecurity: Many on-site email servers and backup solutions suffer from poor security infrastructure. Cloud backup services like Acronis use advanced security measures to keep your sensitive emails safe.
- Ensure compliance with data protection: As mentioned before, emails can hold personal information. Negligent deletion of these emails could put your business at risk of fines under GDPR.
Investing in a backup solution also mitigates the risk of losing data when an employee leaves a Microsoft Office 365 account, which is standard procedure within most companies when an employee leaves.

As a result, any important data stored in that account will never be recoverable. With a backup, a copy of that data is stored elsewhere and is accessible even after the account has been deleted.

You can also secure and encrypt your data in the cloud when you use a cloud-based backup solution so that even if you experience a hardware failure, your data won’t be lost or corrupted.

Get your mailbox backup strategy right with an MSP

A cloud-based email backup solution is the best way to keep your important emails safe. Setting up backup rules and configuring your software solution can be tricky. Get this wrong and the consequences could be dire.

Why not leave it to the professionals? Working with an MSP affords you access to our great wealth of experience.

We’ll be able to walk you through which platform to invest in and guide you on how to get started!

Are you ready to take charge of the security and safety of your data? Get in touch with us now, so we can help you deploy your Microsoft 365 mailbox backup solution.
November 2, 2022
What is the difference between Cyber Essentials & Cyber Essentials Plus?

Are you interested in achieving a Cyber Essentials certification but unsure as to what level of certification is best for you? In this blog, we break down the main differences between Cyber Essentials & Cyber Essentials Plus. As well as offer recommendations for which level of certification businesses should consider.

Let’s recap what Cyber Essentials is

As mentioned in our previous blogs, Cyber Essentials is a government-backed scheme aimed to protect businesses from 80% of the most common cyberattacks. There are 2 levels of certification that we will discuss later; Cyber Essentials & Cyber Essentials Plus. Certification must be renewed annually and cover 5 main areas of checks. Businesses who have a Cyber Essentials certification not only can be assured they comply with the latest cybersecurity measures but also have a clearer picture of their company’s cyber security level.

So, what is Cyber Essentials?

This is the basic level of certification. Achieving Cyber Essentials involves the completion of a self-assessment questionnaire. This questionnaire involves 8 sections and has a total of 70 questions. Here at The Unite Group, we can provide support before taking the assessment to ensure all expected standards are met. As well as providing assistance throughout the application. Upon completion, the business owner or board-level representative must then sign a declaration that all answers are completed correctly. This is then reviewed by a Cyber Essentials assessor and successful applicants will receive their certification.

Who do we recommend Cyber Essentials to?

We recommend the Cyber Essentials certification to all businesses who want to demonstrate that they take cybersecurity seriously. Having this certification can also open new doors for business opportunities as it is a requirement to bid for Government contracts. We recommend this to smaller corporations that want to ensure they are complying with recommended safety measures.

Now let’s compare this with Cyber Essentials Plus

The Cyber Essentials Plus certification involves the same first steps as the Cyber Essentials scheme. Therefore, meaning they both include the completion of the self-assessment questionnaire. However, Cyber Essentials Plus then goes on to further include a vulnerabilities assessment and an on-site assessment. The assessment covers the controls your organisation has in place. As well as, your employee’s work-from-home locations. Also assessing any third parties who may have access to your premises or IT infrastructure. These assessments are undertaken by a trained and qualified Cyber Essentials Plus assessor.

Who do we recommend the Cyber Essentials Plus scheme to?

Here at The Unite Group, we recommend this scheme to those businesses that want to demonstrate higher levels of cybersecurity protection. Whilst Cyber Essentials is a great starting point, the added levels of assessment included in this scheme increase a business’s protection far more. Those who hold a Cyber Essentials Plus certification can bid for Ministry of Defence contracts.

Recap

To recap, the main difference between the two schemes is that the Cyber Essentials Plus certification covers more areas of assessment. It includes a more rigorous test of an organisation’s cybersecurity systems. Experts carry out vulnerability tests and as a result, ensure organisations are well protected against basic hacking and phishing attacks. Therefore, we strongly recommend this option to businesses who want to ensure they best protect their data and that of their customers.

Let us help!

Here at The Unite Group, we can guide you through Cyber Essentials and help you protect your business. We have in-house Cyber Essentials assessors to not only approve certifications but also provide support throughout the application process. We are a friendly voice on the other end of the phone to support you through the certification from start to end.

To find out more, book a quick call with our team today!

October 14, 2022
How can Cyber Essentials help protect your business?

In short Cyber Essentials helps protect your business by protecting you from the most commonly known cyber-attacks. No business owner wants their company to be at risk of any complications which could compromise their ability to operate. In terms of cyber security, we highly recommend companies take the necessary actions to best protect themselves. This is why we encourage achieving a Cyber Essentials certificate.

Let’s break down the 5 main areas of the certification and how Cyber Essentials helps protect your business.

1.      Access Control

Cyber Essentials covers who has access to your files. This is something businesses often overlook. It is important to consider who has access to what. Do all your staff really need access to all your files? Having managed access to administrator accounts means you can protect who has access to your data and services.

2.      Software Updates

The Cyber Essentials scheme also ensures all devices are kept up to date with software updates. Staying current with the latest software updates and security patches protects you against the newest cyber-attacks and vulnerabilities. Updates not only add new features they also are designed to tackle the latest threats on software. To pass the certification all devices must be kept on the latest updates.

3.      Firewalls & Routers

Firewalls are designed to protect businesses from users who are not authorised from gaining access. So by having a firewall in place, you create a so-called ‘buffer zone between your IT network and any other external links. This will allow you to analyse any incoming traffic. Meaning you can decide who to allow access to on your network. Therefore protecting your business from hackers.

4.      Secure Configuration

Secure configuration covers ensuring you choose the most secure setting for your devices and software. This includes changing passwords regularly as well as removing unused accounts and software. It is easy to forget to remove any unused users and software. However, it is very important! Taking such measures massively reduces the risk of potential cyber-attacks. Therefore, protecting you and your data from being compromised.

5.      Malware Protection

Malware protection is another key part of the Cyber Essentials scheme. Using properly configured anti-malware software will protect you from viruses and other malware risks. Anti-malware software will only allow trusted applications to run which reduces the risk of unsafe applications running in the background without you knowing.

Why is protecting your business so important?

Figures from 2021, show 39% of businesses identified a cyber-attack on their business. Of the 39%, 1 in 5 identified a more sophisticated attack type such as a denial of service, malware, or ransomware attack. With 31% of those businesses estimating they were attacked at least once a week. Overall averaging at a cost of £4,200 for small businesses rising to £19,400 for medium and large businesses. Could your business afford such a loss?

Of course, we should also consider not only the financial impact such attacks can have. But also the damage it can do to customers’ trust in your business. As well as the likelihood of them being a returning customer. Would you trust a business if you knew they had gaps in their cyber security which meant they had fell victim to an attack?

No measures can completely eliminate the risk. However, achieving a cyber essentials certification reduces the risk by at least 80%!

Let us help!

Here at The Unite Group, we can guide you through Cyber Essentials and help you protect your business. We have in-house Cyber Essentials assessors to not only approve certifications but also provide support throughout the application process. To find out more, book a quick call with our team today!

October 10, 2022