Cyber Essentials and Cyber Essentials Plus Successful Certification

Cyber Essentials is a UK government-backed cyber security certification scheme, which defines fundamental technical controls organisations should have in place to ensure they are protected against the most common internet-based cyber attacks. The National Cyber Security Centre (NCSC) introduced Cyber Essentials in 2014 and has made several updates since to keep pace with evolving cyber threats and technology advancements.  The Cyber Essentials scheme is administered and delivered by IASME, whilst assessments are conducted by licensed certification bodies, such as URM.

Certification to Cyber Essentials is an excellent first step for organisations looking to demonstrate their implementation of key security controls to existing and prospective clients.  Meanwhile, certifying to Cyber Essentials Plus, the scheme’s higher, audited certification, shows that the effectiveness of your controls has been verified by an independent third party, providing clients and other stakeholders with even greater assurance of your organisation’s commitment to maintaining cyber security.

To mark a decade of Cyber Essentials, URM is drawing on its extensive experience as a certification body in this upcoming webinar, where we will break down everything you need to know about the scheme, from explaining what Cyber Essentials is to providing practical hints and tips on how best to prepare for assessment. The webinar will be addressing the newly-released version 8.0 of the Cyber Essentials Question Set – Willow, which comes into effect on 28 April 2025

In this webinar, we will discuss:

• What is Cyber Essentials? Here we will explain the purpose of the Cyber Essentials scheme is and the differences between Cyber Essentials and Cyber Essentials Plus
• Latest update on new Willow Question Set – Including changes to requirements around security fixes and authentication methods
• Who does CE apply to? URM shares its experience on the types of organisation that can benefit most from achieving Cyber Essentials certification
• Why is cyber security important? Here we look at the frequency and impact of cyber attacks on small to medium-sized enterprises.
• What are the 5 technical control areas? What is the purpose and best practice tips for the 5 control areas (firewalls and internet gateways, secure configuration, user access control, malware protection, patch management and software updates)
• What are the benefits (and costs?) of Cyber Essentials certification?  We examine the benefits of Threat reduction, stakeholder assurance, insurance.
• Practical tips for achieving and maintaining Cyber Essentials and Cyber Essentials Plus certification including
  • pre- certification preparation (getting company buy in, defining effective and accurate scope etc)
  • completing SAQs, preparing for Cyber Essentials Plus
  • secrets of ongoing compliance