CYBER ESSENTIALS CERTIFICATION

PREVENT OVER 99.3% OF CYBER ATTACKS WITH CYBER ESSENTIALS

Cyber Essentials Certification

WHAT IS CYBER ESSENTIALS?

Cyber Essentials is a government-backed scheme developed by the National Cyber Security Centre (NCSC) that ensures basic cyber-security measures are in place and can help to prevent over 99.3% of all cyber attacks. The scheme is based on five controls and ensures that most vulnerabilities are secured, which includes malware, ransomware and phishing.  Cyber Essentials certification is available to businesses of all sizes across the UK.

The Five Controls Required for Cyber Essentials:

Cyber Essentials is focused on internet-based cyber attacks and focuses on five important technical controls – Firewalls/Internet Gateways, Secure Configuration, Security Update Management, Access Control and Malware Protection.

Chat to our team about Cyber Essentials certification:

  • This field is for validation purposes and should be left unchanged.

WHAT ARE CYBER ESSENTIALS & CYBER ESSENTIALS PLUS?

Cyber Essentials

Cyber Essentials
  • Cyber Essentials is the first step in your cyber security journey.
  • This is a self-assessment questionnaire (SAQ) which our team of experts can provide guidance on and help you every step of the way. We will check that your business has the five controls in place and if we spot any weaknesses, we will implement the software or policies required so we can guarantee a pass.
  • We will send your questionnaire to our accredited Cyber Essentials Assessor (CyberSmart) to check against the five controls.
  • If your business is compliant with these five controls, you will be issued with the Cyber Essentials certificate (usually within 24-hours).  This certificate is valid for 12 months from the pass date. Please be aware this must be renewed annually.
  • Once your business is certified you will be issued with Cyber Essentials branding to use in your marketing material and will also receive automatic cyber security insurance cover up to £25,000.
  • The cost of Cyber Essentials certification will depend on the size of your business and the level of support you require from our cyber security experts.
  • We offer various packages to prepare your business for Cyber Essentials accreditation, please get in touch with our team for more information on pricing.

Cyber Essentials Plus

Cyber Essentials Plus
    • Cyber Essentials Plus is a higher level of Cyber Essentials that will protect your business against advanced threats. To achieve this level of certification there will be an external vulnerability scan and an independent assessment remotely or on-site (customer preference) which is conducted by an IASME accredited auditor.
    • We will carry out a pre-audit of your system prior to the final Plus audit to ensure that you are fully equipped before applying for certification.
    • The auditor will review your cyber security measures and verify that your data handling skills are up to scratch. We recommend Cyber Essentials Plus to those who want a thorough assessment of their cyber security measures.
    • After the remote or on-site assessment and vulnerability scan has been completed and approved, you will be issued your Cyber Essentials Plus certificate.  This certificate is valid for 12 months from the pass date. Please be aware this must be renewed annually.
    • Once your business is certified you will be issued with Cyber Essentials Plus branding to use in your marketing material and will also receive automatic cyber security insurance cover up to £25,000.
    • The cost of Cyber Essentials Plus certification will depend on the size of your business, the complexity of your network and whether you require our cyber security consultancy service to get your business to the Plus standard. We use one of the very few certifying bodies that can carry out a remote Cyber Essentials Plus assessment, this will significantly help to keep your costs down.
    • We offer various packages to prepare your business for Cyber Essentials Plus accreditation, please get in touch with our team for more information on pricing.

THE BENEFITS OF CYBER ESSENTIALS CERTIFICATION

Customer Trust

CUSTOMER TRUST

Achieving certification will demonstrate that you are taking the security of their data seriously in response to the 2020 increase in cyber attacks.

New Opportunities

NEW BUSINESS

This industry-recognised certification will give your business a competitive advantage and open up new revenue opportunities.

Secure your business

PEACE OF MIND

Your business will be protected from around 99.3% of cyber attacks by implementing the five controls.

Win Government Contracts

WIN GOVERNMENT CONTRACTS

Cyber Essentials certification is mandatory for many Government tenders and all Ministry of Defence contract bids.

THE FIVE SECURITY CONTROLS REQUIRED FOR CYBER ESSENTIALS:

Over 99.3% of cybercrime could be prevented with 5 simple cyber controls:

Firewalls

FIREWALLS/INTERNET GATEWAYS

Cyber Essentials Certification requires that you configure and use a firewall to protect all your devices, particularly those that connect to public or other untrusted Wi-Fi networks.

Access Control

ACCESS CONTROL

To minimise the potential damage that could be done if an account is misused or stolen, staff accounts should have just enough access to software, settings, online services and device connectivity functions for them to perform their role. Extra permissions should only be given to those who need them.

Security Update

SECURITY UPDATE MANAGEMENT

You must keep all software up-to-date. Software must be: licensed and supported, removed from devices when no longer supported, have automatic updates enabled where possible updated, including applying any manual configuration changes required to make the update effective, within 14 days of an update being released.

Secure Configuration

SECURE CONFIGURATION

Always check the settings of your new devices and software and aim to make changes that increase your level of security. A good start is removing any functions, accounts or services that you don’t need.

Malicious Websites

MALWARE PROTECTION

Malware is short for ‘malicious software’. Every device and server needs a robust anti-malware solution to prevent them from being infected by malicious software.

OUR CYBER SECURITY PACKAGES

Security is one of the most vital aspects of the support we offer our customers. The threat of an online attack is very real and always evolving especially in 2021 with the increased number of remote workers. Every business needs to know that their data is safe and that backups are in place should an emergency arise. At SoConnect we have a great deal of knowledge and experience protecting businesses against the changing threats of an online attack. We have partnered with customers of all sizes to help them successfully gain Cyber Essentials accreditation. Our layered security packages will ensure your business data is secure, backed up and easily retrievable.

When it comes to security, we’re serious about keeping you safe.

Cyber Security Essentials

  • Our Cyber Security Essentials package gives you everything you need to gain your Cyber Essentials certification. We will guide you through the whole process, including in-depth consultations with our cyber security experts.
  • CyberSmart Endpoint Application: The CyberSmart platform monitors all of a business’s devices 24/7. It checks for the most up-to-date applications, operating systems, firewalls, security measures and compliance with Cyber Essentials.
  • Keeper Password Manager: Secure your business passwords to prevent data breaches, improve employee productivity and meet Cyber Essentials compliance.
  • BitDefender GravityZone: Protect your business against ransomware, viruses and malware to prevent computer slowdowns and manage them easily within the GravityZone portal.  An industry-leading, trusted solution that gives peace of mind.
  • ConnectWise Automate Remote Management & Monitoring: Remote monitoring and management (RMM) tool to allow proactive and reactive monitoring of endpoints, networks, computers, and software. Functions include installing new or updating existing software, detecting new devices for remote configuration, alerting and reporting.
  • Vade Secure for Microsoft 365: AI-based Email Security that bolts itself onto Exchange Online Protection as a complementary layer of protection.  Protects users against the most complex email-borne attacks, including malware, ransomware, phishing, spear-phishing and spam, for complete peace of mind. 
  • Acronis Microsoft 365 Backup: Microsoft 365 are only replicated in the cloud by Microsoft, so any accidental or malicious deletes means your customers’ data could be gone forever. Acronis will effortlessly backup SharePoint Online, OneDrive for Business, Exchange Online and Teams. Safe, easy, secure.

Cyber Security Plus

  • Our Cyber Security Plus package gives you everything you need to gain your Cyber Essentials Plus certification. We will guide you through the whole process, including in-depth consultations with our cyber security experts and we will also arrange the remote (or on-site) assessment and vulnerability tests.
  • CyberSmart Endpoint Application: The CyberSmart platform monitors all of a business’s devices 24/7. It checks for the most up-to-date applications, operating systems, firewalls, security measures and compliance with Cyber Essentials.
  • Keeper Password Manager: Secure your business passwords to prevent data breaches, improve employee productivity and meet Cyber Essentials compliance.
  • BitDefender GravityZone: Protect your business against ransomware, viruses and malware to prevent computer slowdowns and manage them easily within the GravityZone portal.  An industry-leading, trusted solution that gives peace of mind.
  • ConnectWise Automate Remote Management & Monitoring: Remote monitoring and management (RMM) tool to allow proactive and reactive monitoring of endpoints, networks, computers, and software. Functions include installing new or updating existing software, detecting new devices for remote configuration, alerting and reporting.
  • Vade Secure for Microsoft 365: AI-based Email Security that bolts itself onto Exchange Online Protection as a complementary layer of protection.  Protects users against the most complex email-borne attacks, including malware, ransomware, phishing, spear-phishing and spam, for complete peace of mind. 
  • Acronis Microsoft 365 Backup: Microsoft 365 are only replicated in the cloud by Microsoft, so any accidental or malicious deletes means your customers’ data could be gone forever. Acronis will effortlessly backup SharePoint Online, OneDrive for Business, Exchange Online and Teams. Safe, easy, secure.
  • Endpoint Detection & Response: Proactive real-time continuous detection and response and long term threat hunting in a user-friendly fashion.
  • Security Awareness Training: More than ever, employees are the weak link in an organisation’s network security. They are frequently exposed to sophisticated phishing and ransomware attacks. Employees need to be trained and remain on their toes with security top of mind.

TALK TO OUR TEAM ABOUT CYBER SECURITY FOR YOUR BUSINESS

You may be interested in these products & services: