Cyber Essentials has been designed to help businesses of all sizes ensure they have the necessary core controls in place to protect themselves against cyber attacks.
Cyber Essentials is a government-backed scheme that outlines the five technical controls an organisation must have to ensure an effective level of security. The National Cyber Security Centre (NCSC) has assured organisations that, with Cyber Essentials, the most common cyber attacks can be prevented.
There are two levels to the certification: Cyber Essentials and Cyber Essentials Plus. Cyber Essentials is a questionnaire-based certification, following the five core technical control themes.
As the threat landscape evolves, the technical requirements can be updated by the two governing bodies, the NCSC and IASME, to reflect new security vulnerabilities. An organisation needs to reapply for the Cyber Essentials certification every 12 months, which validates that their current security protocols are effective in the current threat landscape.