Essential
Cyber
Security
Standards
The Government is committed to ensuring the security of government networks and services and has made it mandatory that all central government suppliers must comply with the Cyber Essentials security standard by June 2014.
This is a scheme designed to help protect the UK from cyber threats, which are becoming a significant risk to UK business. To counter this threat the Government introduced the Cyber Essentials Scheme which encourages organisations to review and improve their basic cyber security measures and demonstrate that they meet or exceed a recognised baseline of cyber security practice.
WHY?
Cyber
Security
Standards
The Cyber Essentials Standards provide a cost-effective route to cyber security for small and medium-sized enterprises that cannot afford to implement complex security measures. It will help protect your business and your customers’ data against threats like malware, hacking and the loss or theft of equipment; and help to prevent damage to your brand and reputation if a data breach occurs.
HOW
Get Cyber
Essentials
Certified
It’s free to register with the Government’s Cyber Essentials Scheme, and you do not need to be a member of the Government Digital Service to use or demonstrate compliance. However, we think it’s really important that you take a look at your current arrangements and think about whether you’re doing all you can to protect your business against cyber criminals.
As a minimum requirement under the Cyber Essentials Scheme you will need to complete a questionnaire and submit it for review along with a scan of your systems showing evidence of basic protection being in place for your IT environment. This will involve installing some basic anti-virus software on your network and updating any operating systems or other software that are available for update on your systems.
Cyber Essentials can be demonstrated through your self-assessment or by an external assessment agency appointed by you – these certified agencies specialise in IT security and are able to provide independent advice and help as required. Any security gaps identified by the Cyber Essentials questionnaire will need to be resolved before the award of a Cyber Essentials certificate can be achieved.