The Cyber Essentials Scheme is the recommended minimum cyber security controls for all UK businesses, as set out by the UK government.
The following outlines the Cyber Essentials Plus service.
Cyber Essentials is a certification where organisations mark themselves against the 5 security domains below
- Firewalls
- Patch Management
- Malware Protection
- Access Controls
- Secure Configuration
Our Cyber Essentials Plus service takes the form of an on-line questionnaire consisting of a series of security posture and policy questions that required to be answered in full – note these are available in advance at no charge. Seric will supply a guidance instruction, covering format and example responses.
Once this on-line questionnaire has been completed, Seric will review and either approve your certification submission to award you Cyber Essentials basic, or decline with feedback to the areas that are not satisfactory to gain certification.
Once this stage is complete and you have achieved Cyber Essentials Basic, a qualified Cyber Essentials assessor examines and tests these controls by way of a technical audit. This audit can be completed in person or remotely. Note Seric may require to deploy audit software to sample PC’s and laptops to audit for compliance, along with testing internet facing components.
Cyber Essentials Plus certification includes cyber liability insurance for any UK organisation who certifies the whole organisation and have a turnover of less than £20m – See here for more information.
Seric offer a Cyber Essentials Plus certification process which includes the following.
- Access to secure Self Service Cyber Essentials portal
- Submission guideline, outlining answer complexity, and depth
- Submission FAQ
- Certified expert one-time review prior to assessment
- Certified expert assessment of submission
- Audit of environment to test security
Upon successful submission and award Seric will supply the Cyber Essentials Plus certificate, and the logos and guidelines for use of the Cyber Essentials branding to allow promotion and marketing of the achievement.
