What Is The Difference Between Cyber Essentials And Cyber Essentials Plus?
The Cyber Essentials certification programme helps organisations to protect themselves against evolving cyber security threats. It acts as a cohesive framework that recognises the steps that have been taken to protect against the evolving nature of cyber-crime.
What is Cyber Essentials?
Cyber Essentials is a two-level government backed certification scheme that assesses and verifies that an organisation has put in place basic security controls against common cyber threats. When an organisation achieves Cyber Essentials certification it demonstrates a commitment to best Cyber Security best practices.
The key aspects of Cyber Essentials are:
- Firewalls & Routers
- Software Updates
- Malware Protection
- Access Controls
- Secure Configuration
The Cyber Essentials basic certificate is a self-assessed stage via means of a questionnaire. This is a relatively straightforward step in the certification process that can lead to Cyber Essentials Plus accreditation.
Equilibrium Security are one of the few Cyber Essentials Certification bodies within the Midlands. We have been working alongside IASME conducting Cyber Essentials and Cyber Essentials Plus assessments since 2016.
What does Cyber Essentials Plus cover?
As with basic certification for the Cyber Essentials scheme, CE Plus covers five core elements: firewalls and routers, software updates, malware protection, access control and secure configuration.
What is Cyber Essentials Plus accreditation?
Cyber Essential Plus provides advanced Cyber Security certification as part of the Cyber Essential scheme. It has a more rigorous assessment process than the basic certificate. After completing the self-assessment of your Cyber Security measures for basic certification, organisations can then move on to Cyber Essentials Plus.
To achieve the Cyber Essentials Plus certification, an assessment of your cyber security measures will be carried out by an independent assessor. This will take place at your premises to assess how well essential cyber security measures are being implemented.
What’s required for Cyber Essentials Plus?
To achieve Cyber Essentials Plus the measures that you have taken will need to be independently assessed by qualified assessors. This will usually include techniques such as security testing that simulate cyber-attacks on different elements of your security configuration.
Do I need Cyber Essentials Plus?
By achieving Cyber Essentials Plus, you gain valuable peace of mind about the security measures you have taken within your organisation. It can also provide reassurance to your clients and customers that you take security seriously and that their data isn’t at risk of being compromised.
What are the differences between Cyber Essentials Basic and Cyber Essentials Plus?
CE Basic level is a self-assessment certificate. The business owner or the person overseeing Cyber Essentials in the organisation will review the answers related to the five crucial Cyber Security areas and then give their approval
- When this has been completed, you will then receive basic CE certification.
- After completing the basic level certification you can then arrange to undergo an independent assessment for Cyber Essentials Plus. This needs to be carried out within 90 days of receiving basic certification.
- After completing the basic level certification you can then arrange to undergo an independent assessment for Cyber Essentials Plus. This needs to be carried out within 90 days of receiving basic certification.
- If the Cyber Essentials Plus audit finds any areas of weakness, the assessment company will provide recommendations for improving security.
- Once these have been carried out you will then receive CE Plus certification. This certificate will be valid for 12 months.
Achieve Cyber Essentials Plus with Equilibrium Security
Equilibrium Security can help you achieve Cyber Essential Plus certification.
As part of the certification process, we will run a series of security tests and carefully managed attacks that test the effectiveness of your security control against real threats.
If we identify any areas that need strengthening, we’ll provide you with suggested remedial actions to apply.
Contact us to find out more about strengthening your cyber security and achieving Cyber Essentials Certification.
Customer Feedback
