Cyber Essentials Plus

Once Cyber Essentials has been complete, Cyber Essentials Plus also involves an independent technical audit of your systems to verify that the Cyber Essentials controls are in place.

The audit includes a representative set of user devices, all internet gateways and all servers with services accessible to unauthenticated internet users. Your assessor will test a suitable random sample of these systems (typically around 10 per cent) and then make a decision whether further testing is required.

You will need to complete the Cyber Essentials self-assessment to be certificated to Cyber Essentials Plus, however, UK Cyber Security Ltd can do the self-assessment and then your Cyber Essentials Plus.  If you already have the self-assessed Cyber Essentials, you will need to complete your Cyber Essentials PLUS audit within 3 months of your ‘basic’ certification.

The Cyber Essentials Plus assessor would normally visit your head office and a representative sample of your other offices in order to carry out the tests. In the current climate, however, some audits can be run remotely.

In general, the organisations that choose to certify with Cyber Essentials Plus report having a greater peace of mind knowing that the controls are all being followed correctly.

The cost of a Cyber Essentials PLUS assessment will depend on the size and complexity of your organisation. You can request a quote from us by requesting a consultation.