Description
Cyber Essentials Plus
Recommended for businesses that already have a good understanding of IT security and want independent technical verification that their Cyber Essentials controls have been implemented correctly.
Cyber Essentials Plus builds on the Cyber Essentials certification by adding an independent technical assessment of your organisation’s IT systems. It provides a higher level of assurance by testing that the five Cyber Essentials technical controls are working effectively in practice.
Why do I need Cyber Essentials Plus?
Cyber Essentials Plus is ideal for organisations that want to demonstrate a stronger level of cyber security assurance to customers, suppliers and other stakeholders.
It is particularly valuable for businesses working within supply chains, bidding for contracts, handling sensitive information or working with public-sector organisations where independent verification of security controls may be required.
Cyber Essentials Plus demonstrates that your organisation has not only completed the Cyber Essentials assessment but has also undergone technical testing to confirm that the required controls have been implemented effectively.
Certification can help your organisation:
- Demonstrate a strong commitment to cyber security.
- Provide greater reassurance to customers and suppliers.
- Meet requirements within certain tenders and supply chains.
- Identify weaknesses before they are exploited by cyber criminals.
- Provide independent verification that Cyber Essentials controls are operating effectively.
How is the service delivered?
Upon receiving your order, UK Cyber Security Group will contact you to discuss your organisation, IT infrastructure and assessment requirements.
Your organisation must first hold a valid Cyber Essentials certification. We will then work with you to define the scope of the Cyber Essentials Plus assessment and arrange the technical audit.
During the assessment, our assessor will conduct technical checks against a representative sample of your in-scope systems. This may include:
- Workstations and laptops.
- Servers.
- Mobile devices.
- Internet-facing systems.
- Cloud services.
- User and administrator accounts.
- Security updates and patching.
- Malware protection.
- Firewall and network security controls.
- Secure configuration.
- Multi-factor authentication and access controls.
The assessment is designed to verify that the information provided within your Cyber Essentials assessment accurately reflects the security controls operating within your environment.
What happens if an issue is identified?
If an issue is identified during the assessment, we will provide clear feedback explaining what needs to be corrected.
Where permitted within the Cyber Essentials Plus assessment process, you will have the opportunity to remediate identified issues and complete the necessary re-testing.
UK Cyber Security Group will guide you through the process and help you understand any technical changes required before certification can be successfully awarded.
What happens when I pass?
Once the technical assessment has been successfully completed, your organisation will receive Cyber Essentials Plus certification, providing independent assurance that the five Cyber Essentials technical controls have been tested and verified.
Where your organisation meets the relevant eligibility requirements, your underlying Cyber Essentials certification may also include cyber insurance benefits associated with the Cyber Essentials scheme.
Cyber Essentials Plus provides a higher level of assurance than Cyber Essentials alone and can be particularly valuable when customers, suppliers or procurement frameworks require independently verified cyber security controls.
Bespoke Requirements
Please contact us to arrange a free consultation and we can discuss any specific requirements you may have.
Need more than one service?
Please visit the All In One Cyber Security page for an instant quotation.
