Cyber Essentials aims to help organisations implement basic levels of protection against cyber-attacks, demonstrating to their customers that they take cyber security seriously.

The five basic controls within Cyber Essentials were chosen because when properly implemented, they help protect against unskilled internet-based attackers using commodity capabilities – which are freely available on the internet. The five security controls are:

1. Boundary firewalls and internet gateways

2. Secure configuration

3. Access control

4. Malware protection

5. Patch management

Organisations undertaking Cyber Essentials are encouraged to recertify at least once a year and where appropriate, progress their security. Since 1 October 2014, Cyber Essentials has become a minimum requirement for bidding for some government contracts. Details can be seen here. You can see more details about the Cyber Essentials and download the requirements from the GOV.UK website