IASME Cyber Assurance

IASME Cyber Assurance allows your business to demonstrate that it not only meets the requirements of Cyber Essentials but also meets GDPR requirements. It was created as a more affordable alternative to ISO 27001 – Information Security Management System and helps businesses of any size demonstrate that they have processes in place to reduce the risk of data breaches and hacking attempts.

You can opt for self-assessment or audited versions depending on your needs.

UK Cyber Security Group Ltd can help guide your business through the process and can help implement any of the system changes or policies that may be required to achieve IASME Cyber Assurance Status.

What is the difference between Cyber Essentials & IASME Cyber Assurance?

Cyber Essentials is a Government scheme that helps businesses to guard against the most common cyber threats from the internet and demonstrate commitment to cyber security. It covers five main technical controls which are firewalls, secure configuration, access management, malware and patch management.

IASME & GDPR is aligned to the Government’s Ten Steps to Cyber Security and includes Cyber Essentials certification as well as controls around people and processes. It also covers the General Data Protection Regulation (GDPR) requirements. IASME & GDPR is aligned to a similar set of controls to ISO 27001 but is more affordable and achievable for small and medium sized businesses to implement.

What is the difference between Self-Assessment and Audited IASME Cyber Assurance?

The self assessment version is a detailed questionnaire can be completed by any business but requires some specialist knowledge to answer the questions correctly and implement any required changes to your system and processes.

The audited version includes interviews with members of staff, a review of documentation and system configuration. It does not include a technical assessment unless you are being audited for Cyber Essentials Plus at the same time. You may still be required to provide evidence / demonstrate to the assessor that your system configuration meets the requirements of Cyber Essentials.