Cyber Essentials
What is Cyber Essentials
Cyber Essentials is an information assurance scheme operated by the National Cyber Security Centre (NCSC) that helps organisations to protect themselves against online threats. It was launched on the 5th of June 2014.
The Government collaborated with the Information Assurance for Small and Medium Enterprises (IASME) and the Information Security Forum (ISF) to create a set of technical controls to help organisations protect themselves against online security threats.
Cyber-attacks come in many shapes and sizes, but the vast majority are very basic in nature, carried out by relatively unskilled individuals. They are the digital equivalent of a thief trying your front door to see if it is unlocked. Cyber Essentials help to prevent these attacks and lock your ‘digital door’. Up to 80% of cyber attacks can be prevented if businesses put simple security controls in place.
The Two Types of Certification
There are two types of Certifications. Cyber Essentials (foundation level) and Cyber Essentials Plus. They both start with a self-assessment questionnaire. Security controls that are covered under the scheme include:
- Firewalls
- Secure Configuration
- User Access Controls
- Malware Protection
- Patch Management
Why Should You Get Cyber Essentials
- Certified cyber security
- Reassure customers that you are working to secure your IT against cyber attack
- Attract new business with the promise you have cyber security measures in place
- You have a clear picture of your organisation’s cyber security level
- Some contracts require Cyber Essentials certification
The Process of Gaining Your Cyber Essentials
Step one: Contact Omnicom and purchase your chosen level of certification – Cyber Essentials or Cyber Essentials Plus. This will then give you access to the members and the assessment questionnaire.
Step two: Your organisation will then need to fill in the questionnaire with your businesses security controls. Omnicom engineers will work with you to accurately complete the questionnaire.
Step three: We then assist you by identifying any gaps in your organisation’s security controls required for the certification. We work with you to rectify the issues before we submit your assessment for a pass.
