Cyber Essentials & Cyber Essentials Plus Certification

An independently verified self-assessment. Organisations assess themselves against five basic security controls and a qualified assessor verifies the information provided.

A qualified and independent assessor examines the same five controls, testing that they work in practice by simulating basic hacking and phishing attacks, and also includes external and internal vulnerability scans.

In addition to the Cyber Essentials scheme, the IASME governance standard is completed at the same time as Cyber Essentials and is along the same lines as the ISO27001 but specifically for small and Medium size companies.

Level 2 is a higher standard where a qualified and independent assessor examines the Cyber Essentials and IASME Governance controls, testing that they work in practice, and each examination is independently audited.