What is Cyber Essentials, and does your business need it?

Cyber Essentials is a UK government-backed scheme that shows customers you have the basic technical protections in place. You may have seen the badge on a supplier's website or been asked for it in a tender.

What does it cover?

The scheme focuses on five technical controls:

• Firewalls: protecting your network and devices from the internet
• Secure configuration: removing default settings and unnecessary software
• User access control: giving people only the access they need
• Malware protection: stopping malicious software from running
• Security update management: keeping devices and software patched

Cyber Essentials or Cyber Essentials Plus?

Cyber Essentials is a self-assessment questionnaire that is checked by a certification body. Cyber Essentials Plus covers the same controls but adds a hands-on technical check of your systems by an independent assessor.

Do you need it?

You may need it if:

• You want to bid for UK government contracts that handle sensitive or personal information
• Larger customers ask suppliers to hold it
• You'd like an independent way to show customers you take security seriously

Even if nobody has asked, working through the five controls is a useful way to find and fix gaps.

Getting ready

Most of the effort is in preparation: knowing what devices and accounts you have, and fixing anything that doesn't meet the requirements before you apply. Check the current requirements and costs with an official certification body, because the details are updated from time to time.

If you'd like help getting ready, see our Cyber Essentials Preparation service, or get in touch. The free Cyber Health Check is a good first step. It is an indicative self-assessment, not a certification.