Cyber Essentials Certification (Microbusiness 1-10)

Current state and what is needed for Improved State.

This can be used for planning for developments needed to achieve:

Cyber Essentials (and Plus)

Cyber Assurance

ISO27001

This was a buzzword, but it has crept into legislation. What does it mean? Quite simply, it refers to ability to recover its systems quickly after an attack. If a business doesn't recover quickly (i.e. within 10 days) it may never recover.

We think all businesses should aim for Cyber Essentials. This is only about 5 technical controls but if correctly implemented they will stop 80% of attacks. Really good cyber security, or Cyber Resilience, cannot happen overnight. It will be a journey that could last years. We can take even the smallest business through the various stages of getting good digital security that is suitable for them. 

Every business is different. In this option, we look at the journey businesses can take beyond Cyber Essentials to develop a system that is truly resilient to attack, and quick to recover after one.

The next step may be Cyber Essentials plus. Or Cyber assurance (L1 then L2). Or ISO27001 (although, if starting from CE, that would be a very big step indeed!)

Cyber Essentials is a set of basic technical controls organisations should have in place to protect themselves against common online security threats.
This certification is suitable for all organisations, of any size, in any sector.
As well as helping to guard your organisation against cyber attack, Cyber Essentials demonstrates your commitment to cyber security to your customers and suppliers.