‘Cyber Essentials’ What is it and who is it for?

Cyber Essentials is a simple but effective government-backed scheme that will help protect organisations, whatever the size, against a whole range of the most common cyber-attacks.

Attacks come in many shapes and sizes, but generally can be very basic in nature and are carried out by relatively unskilled individuals. Think of them as the digital equivalent of a thief trying the front door to see if it’s unlocked. There are two levels of certification offered:

Cyber Essentials self-assessment

This option gives protection against a wide variety of the most common cyber-attacks by addressing procedures and cyber security measures. Vulnerability to simple attacks can mark organisations out as a target for more in-depth and unwanted attention from cyber criminals and others. Certification gives peace of mind that an organisations’ defences will protect against the majority of common cyber-attacks. These attacks are looking for targets which do not have the Cyber Essentials technical controls in place.

Cyber Essentials Plus

Cyber Essentials Plus offers additional hands-on technical verification and certification of the procedures and security measures implemented in Cyber Essentials. Questions and answers about the scheme and certification can be found here.

What are the advantages of Cyber Essentials?

• Reassure customers that you are working to secure your IT against cyber-attacks.

• Attract new customers with the confidence that cyber security measures are in place.

• A clear picture of the organisation's cyber security level.

• Some government contracts require Cyber Essentials certification.

To bid for central government contracts, which involve handling sensitive and personal information, or the provision of certain technical products and services, organisations will require Cyber Essentials Certification. More information is available on the Gov.UK website.

Contact NCSC Cyber Essentials Partner the IASME consortium to get certified.