{"id":597,"date":"2018-09-13T17:44:59","date_gmt":"2018-09-13T17:44:59","guid":{"rendered":"http:\/\/iso.thatwebdev1.co.uk\/?page_id=597"},"modified":"2019-11-18T14:31:52","modified_gmt":"2019-11-18T14:31:52","slug":"cyber-essentials","status":"publish","type":"page","link":"https:\/\/www.episodeltd.com\/cyber-essentials\/","title":{"rendered":"Cyber Essentials +"},"content":{"rendered":"\n\t

Cyber Essentials Plus<\/h1>\n\t

Created by the National Cyber Security Centre (part of GCHQ), Cyber Essentials is a UK Government scheme aimed at helping you adopt best practice in information security.<\/p>\n

There is a self-certification version, Cyber Essentials, but it is best to have your set up independently assessed, which is the Cyber Essentials Plus scheme.<\/p>\n\t

How do I get Cyber Essentials Plus<\/h2>\n\t

Don\u2019t be put off by thinking it is too complex a thing to do. We aren\u2019t saying it\u2019s simple, but with us doing the bulk of the work for you, including managing the whole process, it is relatively straightforward.<\/p>\n

There are really 6 stages to becoming and staying certified to Cyber Essentials Plus:<\/p>\n

    \n
  1. Establish a system that complies with the standard<\/li>\n
  2. Complete the questionnaire, which in essence is detailing how you address the requirements of 5 main technical controls<\/li>\n
  3. Make everyone aware of the system and any changes in ways of working that have come about<\/li>\n
  4. Operate the system to
    \na. Make sure it works efficiently
    \nb. Build evidence of compliance with the requirements of the standard
    \nc. Get staff familiar with it<\/li>\n
  5. Appoint a \u201ccertification body\u201d to independently assess whether you comply with the requirements<\/li>\n
  6. Keep using the system once it has been certified (to keep the certificate)<\/li>\n<\/ol>\n

    There is more detailed information below about the various stages you need to go through.<\/p>\n\t\t\t\t\"\"\n\t

    Your Cyber Essentials Plus certification journey<\/h2>\n\t\t\t\t\"Group\n\t

    Getting Started<\/h3>\n\t
      \n
    1. Set a timetable and stick to it<\/li>\n
    2. Provide a comprehensive briefing on what Cyber Essentials Plus requires, in simple to understand language<\/li>\n
    3. Help select a certification body to independently assess your compliance with the requirements<\/li>\n
    4. Begin completing the questionnaire the chosen certification body uses<\/li>\n
    5. Decide what you want covered by the certificate \u2013 which sites, products and services. You can exclude some if you prefer<\/li>\n
    6. Put the right resources in place<\/li>\n
    7. Establish a dedicated client portal on our collaboration and document sharing platform<\/li>\n<\/ol>\n\t\t\t\t\"Group\n\t

      Implementing<\/h3>\n\t
        \n
      1. Establish a detailed project plan in our online project management platform (and stick to it)<\/li>\n
      2. Map out your business processes and the data\/information flows involved<\/li>\n
      3. Conduct cyber security tests such as penetration testing and network security testing with our Cyber Security partner<\/li>\n
      4. produce a detailed report of what needs to be addressed.<\/li>\n
      5. If you don\u2019t have resources to fix the issues, they can provide a fixed fee proposal for doing the work for you<\/li>\n
      6. Appoint an accredited certification body and apply for certification<\/li>\n<\/ol>\n\t\t\t\t\"Group\n\t

        Certification<\/h3>\n\t
          \n
        1. Return application document, including completed questionnaire<\/li>\n
        2. Certification body undertakes remote review of the completed questionnaire and onsite checks<\/li>\n
        3. Address any findings from the assessment<\/li>\n
        4. Re-submit documentation for final sign-off and certificate issue.<\/li>\n<\/ol>\n\t

          FAQ\u2019s<\/h3>\n\t