Cyber Essentials is a UK Government backed scheme, to ensure businesses implement a set of basic technical controls to protect themselves against common online security threats. Cyber Essentials is suitable for all organisations, of any size, in any industry.

The 5 technical controls are:

• Firewalls
• Secure configurations
• Applying access controls
• Anti-Malware measures
• System maintenance

Certification takes four simple steps, with expert support throughout.

• Once you have purchased a Cyber Essentials subscription, you will be given access to our platform where you can input your evidence for the controls. Helpful tips and guidance will also be provided to support your application submission.
• The next step is submitting your application. If you are unsure as to whether you've provided the right information, our experts are available on live chat for support or, alternatively, you will receive feedback on each failed check at step three.
• One of our IASME assured assessors will review your application and for any failed checks, will provide what steps need to be taken in order to fix them.
• Once you have passed all your checks and a successful submission has been made, you will be provided with a digital certificate of completion as well as badges to be used in your marketing materials. You will also be added to IASME's database of certified organisations, should your partners or customers want to verify it.

Not for CyberSmart customers. We provide an online questionnaire with clear guidance and examples of what's required to pass each check, free support and advice as well as unlimited attempts at no extra cost.

CyberSmart operates a yearly rolling subscription. This is to ensure that you never miss your re-certification deadline or open yourself up to attacks.

Danzell

Yes. It is highly advised that any company doing business in the UK, even if they are based overseas, should get certified. Not only does it demonstrate a commitment to security, but also many business contracts in the UK require organisation's to have Cyber Essentials.

There are a number of reasons why using spreadsheets for Cyber Essentials is not advised.

• Lack of strong security features
• Disorganised version control
• Manual data input and collection

Instead, we recommend using a digital portal, like CyberSmart's, to ensure that your business' most critical information is captured and protected. Moreover, our smart notification system will ensure that you'll never miss re-certification or have a day without protection.

There are no known downsides to Cyber Essentials and additional certifications can be used in parallel with it. However, it is highly advised that businesses take out a Cyber Essentials Plus audit, as it ensures there is external validation of checks, as well as the added assurance of passing cyber-attack simulations. For more enhanced protection, we would also recommend products such as Active Protect, which scans your devices and software daily for any vulnerabilities and misconfigurations. It also comes with training and policy management which should reduce the likelihood of a breach.