Cyber Essentials

Certification With Expert Support

Cyber attacks are a real threat to an organisation. With most information and data now based online on connected servers and cloud-based services, having secure IT software and processes is crucial to prevent cyber crime and data breaches of sensitive information.

Gaining Cyber Essentials certification allows organisations to showcase trustworthy security credentials and demonstrate their commitment to cyber security.

  • Enhance data security processes and policies to protect data.
  • Achieve Cyber Essentials certification with an internationally accredited certification body.
  • Demonstrate robust IT and data security systems to build customer trust.
  • Reduce the risk of reputational harm through data breaches and cyber attacks.
  • Protect organisational assets, IP, sensitive and commercial data.

Cyber Essentials Certification

Cyber Essentials Certification

Certification enables organisations to assess themselves against five basic security controls, and a qualified assessor verifies the information provided.

Learn More

Cyber Essentials Plus Certification

Cyber Essentials Plus is a technical audit of your system. 
A qualified assessor examines the same five controls, testing that they work through a technical audit.

Learn More

What is Cyber Essentials

Cyber Essentials is a globally recognised IT security standard developed by the UK’s National Cyber Security Centre, which is used to ensure that IT software and processes are secure and organisations are protected from data breaches and leaks. It may be a mandatory certification required by governments and large organisations when working with suppliers on sensitive projects.

It covers five controls, which include:

  • Boundary firewall and internet gateways.
  • Secure configuration.
  • Access control.
  • Malware protection and patch management.
  • Software updates.

What are the benefits of Cyber Essentials certification?

Certification ensures that your organisation’s IT is protected, with measures to reduce security risks and put in place a plan of action in the event of a cyber attack.

The benefits of implementing Cyber Essentials include:

Improve your organisation’s information security at a time where data protection has never been more critical.

Help ensure compliance with General Data Protection Regulations (GDPR) across the European Union and the UK.

Reduce the risk of hefty fines from data breaches or not adhering to data protection legislation.

Help win contracts and new business with UK organisations where Cyber Essentials is required.

Demonstrates a level of commitment towards protecting the data you process.

Boost your reputation and increase trust among your clients, customers and employees.

Cyber Essentials Logo

Cyber Essentials Certification Process

This is the basic level of Certification but with support our expert assessors. Achieved by a verified, self-assessed online questionnaire. Covering firewalls, malware protection, patch management, secure configuration of your devices and access control.

Process

  • Purchase Cyber Essentials Basic Certification by selecting the number of employees and adding to the cart below or contact us to discuss your requirements to agree on the costs involved using the form to the right
  • We will be in touch to provide you with your credentials to access your questionnaire
  • You fill in the online questionnaire. Our assessor will review your answers and advise of any required changes
  • You submit your online questionnaire once you and the assessor are happy
  • If successful you will receive your certificate

Please use the form to enquire about Cyber Essentials Basic Certification. Alternatively you can purchase it now.

Clear
cyber essentials plus logo

Cyber Essentials PLUS Certification Process

Already have Cyber Essentials and would like to secure Cyber Essentials Plus? This level requires a remote technical audit of your system which includes a review of how you are meeting the 5 categories of Cyber Essentials. To discuss your requirements, please contact us.

Process

  • Client makes enquiry
  • We will confirm that the Cyber Essentials Basic Certificate has been issued within the last 3 months
  • We assess the number of days testing and assessment will take
  • We will provide a Quotation
  • Arrange for remote assessment to take place
  • Cyber Essentials Plus Certificate and report issued if all criteria are met

* If you need support in addressing the issues identified,
please contact us.

Please use the form to enquire about
Cyber Essentials Plus

Why choose Certification Europe

Certification Europe can partner with your organisation to ensure you achieve the Cyber Essentials certification. We are trained and licensed to certify Cyber Essentials and Cyber Essentials PLUS.

In addition to Cyber Essentials certification, companies have the option to obtain the IASME standard**, which includes aspects of basic information security governance.

** IASME is the Information Assurance for Small and Medium Enterprises (IASME) Consortium.

Start your journey to Cyber Essentials

Contact our dedicated team for a free, no-obligation quotation to start your Cyber Essentials certification journey. We tailor quotes to meet your requirements, and we support a range of ISO standards, including ISO 27001 and ISO 9001.

Learn more about Certification Europe’s accreditations, discover our client testimonials, and learn more about working with us.

Frequently Asked Questions

Below you’ll find the answers to the most common questions you may have about Certification Europe. If your question does not appear here or you need to know more, our team is always happy to help.

Cyber Essential is suitable for any organisation that requires a base-level security certification to demonstrate it has vital controls in place.

Cyber Essentials is also mandatory for businesses seeking UK government-specific contracts; without the certification, your organisation won’t be able to bid for such contracts.

 A Cyber Essentials certificate is 12 months certification and should be renewed annually due to the ever changing cyber world.

Boundary Firewalls and Internet Gateways

Your first line of defence against an intrusion from the internet will be boundary firewalls and internet gateways. A well-configured firewall can prevent breaches before they penetrate deep into your network. At the same time, an internet gateway can deny users within your organisation to websites or other online services that present a threat.

Secure Configuration

Some setup and configuration will be required to ensure your hardware and software provide the most effective protection. Removing unused software and services from your devices will reduce the number of potential vulnerabilities as older versions of some widespread software have well-documented security vulnerabilities. It is also to ensure that you remove any default passwords used by software and hardware as these are well-known by hackers.

Access Control

Access to your system should be restricted to trusted users, so each of these users must have and use their username and password, which is appropriate to the job they are undertaking at the time. Administrator accounts should only be used when strictly necessary, such as installing known and trusted software.

A brute force password attack is a common method of attack, perhaps even by casual users trying to access your Wi-Fi. Therefore, you need to enforce strong passwords and frequent password changes and limit the number of failed login attempts. Passwords or other access should be cancelled immediately should a staff member leave the company or is absent for long periods.

Malware Protection

Malware is malicious software specifically designed to disrupt or damage a computer system. You should have anti-virus or anti-malware products regularly scanning your network to prevent or detect threats. You will also need to keep them up-to-date and switched on to continually monitor your computer system.

You should also make sure you receive and act upon any alerts issued by the malware protection.

Patch Management and Software Updates

Computer equipment and software need to be maintained regularly to fix any security vulnerabilities and keep it running smoothly. Security software such as anti-virus and anti-malware need regular updates to provide adequate protection. Checking regularly for updates and subsequently applying them will keep your software up-to-date, and most software can also be set to update automatically.

If your system is a few years old, you should review the protection you have to ensure it is still adequate. In between updates, you should use patches to maintain your computer system. A patch is software designed to update a computer program or its supporting data to fix or improve it. This includes fixing security vulnerabilities and other bugs, with such patches usually called bug fixes, and improving usability or performance.

Check out our eLearning course to learn more about Cyber Essentials