Cyber Essentials

Cyber Essentials (CE) is a Government backed and industry supported scheme assisting businesses in protecting themselves against the ever growing threat of cyber attacks, and provides you certification demonstrating to your business partners, customers and regulators that you take cyber security seriously.

For directors and senior managers, Cyber Essentials provides a practical starting point for overseeing the security of the systems your business depends on. It gives leadership a defined set of requirements around which to organise responsibility, funding and progress reporting. The aim is to make essential protection part of everyday business management, with clear ownership across your organisation and its IT providers.

Before starting, appoint a business owner for the assessment, confirm which parts of the organisation will be included and agree who will supply the required information. Make time and budget available to address any gaps. The Cyber Essentials assessment requires sign-off by a board member or equivalent, so leadership should understand the scope and the basis of the answers being submitted.

COST FROM £300 + VAT

The CE is an assessment which covers 5 core controls that when implemented correctly can prevent around 80% of cyber-attacks. On successful completion of the assessment, a certification is issued to your organisation.

These are: Boundary Firewalls and Internet Gateways, Secure Configuration, User Access Control, Malware Protection, Patch Management

The five controls translate into management decisions about how your organisation buys, configures and maintains technology, and who is allowed to use it. Leaders should know who owns the device and software inventory, how access is approved and removed, and how security updates are kept on track. Where an external IT provider manages these activities, agree responsibilities and request evidence of what has been implemented.

Managers can support delivery by setting realistic deadlines, making staff available and resolving decisions that technical teams cannot make alone. Replacing unsupported equipment, restricting unnecessary access or changing working practices may need budget and business approval. Review the controls when staff, systems or services change, so the protections remain effective as the organisation grows.

CE certification can help your organisation in many ways.

• Reassure customers that you take cyber security seriously
• Be listed in a Directory of organisations awarded Cyber Essentials
• Attract new business with the assurance that you have cyber security measures in place

For executive teams, certification offers a recognised way to communicate that the organisation has addressed a defined baseline of cyber security. It can support customer and supplier assurance discussions and help meet procurement requirements where Cyber Essentials is specified. Check the requirements of each opportunity, including the certification level and scope requested, before relying on the certificate for a bid.

The management value also comes from making security responsibilities visible and maintaining attention between assessments. Plan for annual renewal, track actions and ask for regular updates on the controls. Treat certification as one part of your wider approach to protecting business operations, alongside the measures your organisation needs for continuity, recovery and response.

Executives need to understand what the assessment means for their organisation and which decisions need their attention. Use our pre-assessment consultation to explain your business priorities, current IT arrangements and any customer deadlines. This gives managers and technical colleagues a shared starting point for discussing the requirements and organising the information needed for the assessment.

Our guidance and support help you work through the certification process with a clearer understanding of what is required. Your organisation should retain an accountable sponsor, coordinate its IT providers and approve the changes needed to address gaps. Agree responsibilities and a realistic timetable early, and use the assessment to establish a repeatable approach for future reviews and renewal.

• Enjoy a fixed-price assessment with no hidden fees or unexpected costs.

• Rely on our experts to manage your Cyber Essentials certification from start to finish.

• Get clear guidance through a detailed pre-assessment consultation that helps you understand every step of the process.

• Benefit from ongoing support via email and telephone throughout your certification journey.

• Access your progress securely through our easy-to-use online portal.

• Achieve certification with confidence - receive your official Cyber Essentials Certificate and Cyber Insurance worth up to £25,000* on completion.

Oxford Systems are a Certification Body, who have been trained and are licensed by ‘The IASME Consortium’ or IASME to help you become certified.

Our Cyber Security Experts can help you understand these terms and what is required.