Cyber Essentials

Cyber Essentials is a UK government backed certification designed to protect both your organisation’s data and your customers’ information from common cyber threats.

Recognised and recommended by the National Cyber Security Centre (NCSC), Cyber Essentials sets out the minimum level of cybersecurity every organisation should have in place. It provides a solid baseline of protection that applies across all industries and business sizes.

The scheme focuses on five fundamental security controls which, when properly implemented, can help prevent up to 80% of the most common cyberattacks.

Firewalls

Act as the frontline defence between your internal network and the internet – filtering and controlling inbound and outbound traffic to block unauthorised access and reduce the attack surface.

Secure Configuration

Ensures devices and systems are locked down: change default settings and passwords, disable unnecessary services, close unused ports, and enforce screen-locking and authentication on unattended devices.

User Access Control

Restricts access through least-privilege principles, only authorised users have access to systems and data needed for their role. Regular reviews and deactivation of unused accounts help limit potential breaches.

Malware Protection

Implements anti-malware/antivirus tools to detect and block malicious software. Includes blocking access to known phishing or malicious websites and limiting software execution to approved applications.

Security Update Management

Keeps all software and devices up to date by promptly applying security patches, closing known vulnerabilities and ensuring systems remain protected from newly discovered threats.

Level of Certifications

Keeps all software and devices up to date by promptly applying security patches, closing known vulnerabilities and ensuring systems remain protected from newly discovered threats.