Obtaining Cyber Essentials certification showcases your organisation's commitment to cybersecurity, signalling to customers, suppliers, and stakeholders that you take data protection seriously. Additionally, this certification opens doors to public sector contracts, lowers insurance premiums and aids in meeting compliance obligations.

There are two levels of Cyber Essentials certification. The cost of Cyber Essentials (verified self-assessment) depends on the size of the organisation. Pricing is below: 0-9 Employees (Micro): £320 Excl. VAT 10-49 Employees (Small): £440 Excl. VAT 50-249 Employees (Medium): £500 Excl. VAT 250+ Employees (Large): £600 Excl. VAT The cost of a Cyber Essentials Plus assessment will depend on both the size and complexity of your network(s) and organisational devices.

Cyber Essentials Plus entails a comprehensive technical audit of the systems falling under Cyber Essentials certification, encompassing a representative set of user devices, all internet gateways, and servers with services accessible to unauthenticated internet users. The assessment's cost is contingent on your network(s)' size and complexity. To obtain an estimate or quote, kindly reach out to us through our Contact page.

Cyber Essentials centers around five key technical control themes to ensure robust cybersecurity: Firewalls Secure Configuration User Access Control Malware Protection Patch Management To access the Cyber Essentials requirements document and the Cyber Essentials Plus illustrative technical specification (for Cyber Essentials Plus), you can find them both at this location: here

Every new certificate issued will be valid for 12 months. As recommended by the UK government, it is advisable to renew your certification annually. To maintain your status as a certified organisation, it is essential to undergo recertification within the past 12 months. Rest assured, any company we assist in the certification process will receive a notification at least one month before their certificate's expiry date, ensuring timely renewal.

For Government contracts, Cyber Essentials certification or evidence of implemented technical controls is often a prerequisite. We strongly recommend confirming the specific expectations of each Government department regarding Cyber Essentials certification before pursuing any contracts. Requirements and exemptions can differ between departments, making it crucial to seek clarification for each contract individually.

Every device utilised to connect to the business network or access any business applications or services falls within the scope for Cyber Essentials. For instance, if you use mobile phones to view work emails, these devices must also adhere to the scheme's requirements, including having a secure lock/pin, malware protection, being non-jailbroken/non-rooted, and promptly applying updates within 14 days of release.

Right here! Just get in Contact with us and we will be more than happy to assist you on your Cyber Essentials journey.