IE
IT Governance is a CREST-accredited Cyber Essentials certification body, meaning that this service includes an external and internal vulnerability scan that independently verifies your security status.
This service will help you achieve CREST-accredited Cyber Essentials Plus certification with a little help from us. It is conducted online and includes:
We recommend this solution for organisations that are confident they have the skills to achieve Cyber Essentials Plus certification, but are unsure of their scope and do not fully understand the five controls (secure configuration, boundary firewalls, access controls, patch management and malware protection).
The Cyber Essentials scheme is a world-leading, cost-effective assurance mechanism for companies of all sizes to demonstrate that the most important cyber security controls have been implemented.
Correctly implemented cyber security has the additional advantage of driving business efficiency throughout the organisation, saving money and improving productivity.
With this service you can conduct the entire certification process using our secure portal – a user-friendly, no-fuss solution to applying for Cyber Essentials Plus certification. This unique online service enables companies to apply for Cyber Essentials Plus certification following a convenient ‘do it yourself’ approach.
The most important aspect of your CES documentation is that it must be your own work and in your own words. You will need to complete the documents in the toolkit to reflect your organisational culture, your processes and your technologies.
This Live Online consultancy service is for 2 hours and is offered via telephone or Skype. This service is ideal for companies not certain about the requirements of the scheme, which option to choose, or how to define the scope of the certification.
Your bundle will also include the following:
If you need a lot more help than the two hours of Live Online consultancy to define your scope, or to further understand the five Cyber Essentials control areas, we recommend that you purchase our Cyber Essentials Plus Get A Lot Of Help package, as this includes a full day of on-site consultancy. We will then be able to help you through all areas of the application process in greater detail.
Human error is one of the leading causes of data breaches. Failing to train your staff on the dos and don’ts of cyber security could be disastrous. Data breaches not only result in financial losses and penalties but can also damage your reputation as consumers lose faith in your brand. Train your staff and take the extra step to boost your security with a phishing staff awareness course.
Empower and educate your staff on the right steps to take to keep your organisation and data secure. Achieving Cyber Essentials certification and implementing phishing staff awareness training will strengthen your defences, further secure your organisation and help to mitigate your risk of attack.
Implementing the five controls correctly will help protect your organisation.
Focus on your core business objectives knowing that you are protected from the majority of cyber attacks.
Demonstrate your commitment to protecting your own data and that of your customers and suppliers.
Cyber Essentials will permit you to work with the UK government and Cyber Essentials Plus will give you the opportunity to work with the MoD.
Boost your reputation and have a greater chance of winning contracts.
Cyber insurance agencies often look more favourably on organisations that have achieved Cyber Essentials certification.
The package price is based on on-site testing at one location, of one type of user account, on up to eight workstation builds and up to five mobile devices (smartphones and tablets*). The duration and the number of locations that must be included in the internal testing depend on the number of user device builds, including BYOD, within the scope of the certification.
*Microsoft Surface Pro Tablet is treated as a workstation.
The number of locations to be tested depends on whether all the different build can be tested in one location. A build can be delivered to a particular site for testing purposes even if it is not normally deployed there, providing it accesses the Internet in its usual manner. The number of builds is defined by the number of configurations of operating system and software suites installed.
Examples of relevant software are listed below:
If more than one browser or Office suite is used, each variant needs to be tested. If they are installed on the same build, this is acceptable.
The on-site assessment is subject to additional travel expenses, which will be charged in arrears.
The package includes a free vulnerability scan for up to 16 IP addresses. If you have more than 16 IP addresses, you will need to purchase additional IP packages in packs of 16. If you fail your external scan, a rescan will need to be purchased, plus any additional IP packages that you need.
You will receive the documentation toolkit within 48 hours of your purchase and we’ll contact you at the same time to schedule your Live Online consultancy. Your Live Online consultancy can be split over multiple sessions but any unused time will not be credited back.
If your business is located outside mainland UK (England, Scotland and Wales), additional expenses will be charged to accommodate our consultant’s travel for the on-site assessment.
