The UK Government has today launched the Cyber Essentials scheme, designed to help organisations of all sizes protect themselves against the most common internet-based cyber-attacks.
The scheme focuses on five technical control themes:
- Boundary firewalls and internet gateways
- Secure configuration
- Access control
- Malware protection
- Patch management
There are two levels of certification: Cyber Essentials, a verified self-assessment, and Cyber Essentials Plus, which adds independent technical testing.
Cyber Essentials is not a substitute for a risk-based information security management system such as ISO/IEC 27001, but it is an excellent baseline, and a useful way to demonstrate basic cyber hygiene to customers and supply chains. We expect it to be increasingly asked for in tenders and contracts.
Source: Cyber Essentials scheme: overview (GOV.UK)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
