Cyber Essentials (CE) and Cyber Essentials Plus (CE+) are accreditations that demonstrate your organisation’s commitment to safe digital practices. Here’s why we think they’re important and how you can get started.
What is Cyber Essentials (CE)?
Cyber Essentials is a UK government scheme that demonstrates a business has met a minimum level of cyber security. It’s a self-assessment, with a set of questions to answer based on 5 key controls:- Firewalls
- Secure configuration
- User access control
- Malware protection
- Patch management
How much does Cyber Essentials cost?
The cost of Cyber Essentials depends on the size of your business. The certification price starts at £300 +VAT for micro-organisations and £400 for those between 10 and 49 employees. Quite often, businesses will need help to complete and check the forms, including any improvement work that’s needed in order to pass. You will need to factor this in on top of the certification cost. Check how much the certification would be for you: https://iasme.co.uk/cyber-blog/price-change-and-updates-to-cyber-essentials/What is Cyber Essentials Plus (CE+)?
CE+ is the advanced certification, testing against the same 5 controls. The difference is that for CE+ your answers are verified by a certified body. The auditor will test a sample of your devices, within scope, and verify that the answers are true. If you want to go the extra mile and become Cyber Essentials Plus certified, you will need to do so within 3 months of your Cyber Essentials accreditation. So we recommend considering both options at the same time. Cyber Essentials Plus sets you and your business apart from the rest, as well as ensuring that you’ve got the correct cyber security processes in place.How do I know if we’re ready for CE & CE+?
If you’re not sure whether or not to try to achieve these accreditations, you’re not alone. It’s a question we are often asked by business leaders. To help you decide, the certification body IASME has created a readiness tool, which is a great place to start: https://getreadyforcyberessentials.iasme.co.uk/questions/ The readiness tool features handy checklists of the things you need to know to answer the accreditation questions, such as:- Do you run any software that is no longer in support?
- Are all your default passwords changed regularly and longer than 8 characters?
- What cloud services do you run and have you enabled Multi Factor Authentication (MFA) on them?
To discuss your specific server needs, please get in touch. We’re always happy to help. Please reach out via our contact page.
