Data being processed by servers in a data centre

Cyber Essentials Plus

Overview

What is Cyber Essentials?

Cyber Essentials is a UK government-endorsed standard designed to help businesses of all sizes minimise their security risk and demonstrate a commitment to the protection of personal information relating to employees, customers, partners and investors.

The Cyber Essentials scheme, part of the UK’s National Cyber Security Programme, is designed to help businesses of all sizes minimise their security risk and demonstrate a commitment to the protection of personal information relating to employees, customers, partners and investors. Cyber Essentials covers common security threats such as malware infections, social engineering attacks and hacking. It involves an annually verified assessment of key security controls that can help organisations to defend against common attack vectors that target enterprise-level and corporate IT systems.

Redscan offers organisations the in-depth security knowledge and assessment services required to obtain Cyber Essentials Plus certification.

Protection of key assets

By highlighting common vulnerabilities affecting assets including firewalls, systems, websites and software applications, the Cyber Essentials scheme helps businesses reduce their information security risk.

Verified accreditation

Receiving independent verification of key security controls by Redscan demonstrates the effectiveness of systems, people and processes in defending against a wide range of cyber threats.

Enhanced reputation

Demonstrating to customers, partners and investors that cyber security is taken seriously improves outside perception and can provide a key competitive advantage.

Eligibility for public sector contracts

Cyber Essentials certification is mandatory for any business wanting to bid for a central government contract that involves the handling of sensitive or personal information.

CE Plus

Reasons to choose Cyber Essentials Plus

Cyber Essentials Plus certification is the level recommended for businesses that want to demonstrate a higher level of security assurance. To receive certification, organisations must permit Redscan to perform an on-site inspection to verify the findings of a questionnaire and conduct internal and external vulnerability assessments.

In-depth testing and insight

By performing internal and external vulnerability assessments as well as an on-site inspection of systems and policies, Redscan’s experts thoroughly investigate a business’s network to identify vulnerabilities that a self-assessment could easily overlook.

Tailored assessment

Independent Redscan assessment can be tailored to certify a whole organisation or sub-set of it. Cyber Essentials Plus requires appraisal of all network infrastructure including cloud services, bring your own devices (BYOD) and commercial applications.

Comprehensive reporting

After each assessment, Redscan produces a detailed report of key findings. This includes, as appropriate, any remediation steps required for a re-test to be conducted.

End-to-end assistance

Assistance every step of the way helps businesses complete the initial self-assessment questionnaire, as well as the on-site checks and vulnerability assessment conducted by Redscan.

Managed Detection and Response

Award-winning support to rapidly detect and respond to the latest threats 24/7

Assessment Services

Specialist engagements to uncover and address hidden cyber security risks

Managed Security Services

Expert help to manage and monitor your choice of security technologies

Get in touch

Complete the form for a prompt response from our team.

From the blog

From the blog Case studies Latest news

2nd December 2020

Cloud security series: Key controls to help enhance cloud security

27th November 2020

Cyber Security Explained: What is a Security Operation Centre (SOC)?

26th November 2020

Redscan Q&A: A Perspective on Pen Testing with Jed Kafetz

20th November 2020

Webinar: Dissection of a spear phishing attack

Specialist Bank

Raising the bar by uncovering vulnerabilities across a bank’s estate

IPL Plastics

Protecting a global manufacturer’s critical systems

Bernhard Schulte Shipmanagement

Protecting a global shipping business against ransomware

Intermediate Capital Group

Safeguarding critical client assets worth billions

30th November 2020

Cyber-attacks increase significantly in all vectors and types

A new report has revealed that DDoS, web application and bot attacks have increased exponentially compared to the first half of 2019, with attacks on web applications rising by 800%.

23rd November 2020

A third of charities experienced a cyber-attack during the pandemic

A third of charities have suffered a cyber-attack during the coronavirus pandemic, according to new research. The most common types of threats affecting charities are phishing attacks, spear-phishing, malware and ransomware.

16th November 2020

Human error a significant security risk for businesses during Covid-19 crisis

A recent report suggests that human error has been the biggest cyber security risk for companies during the COVID-19 pandemic, affecting 80% of businesses.

3rd November 2020

NCSC: over a quarter of cyber security incidents linked to Covid-19

The latest annual review from the National Cyber Security Centre (NCSC) states that over a quarter of cyber security incidents are related to Covid-19. Key targets for threat actors during the pandemic have been identified as employees working from home and academic institutions.

Contact Us

Cyber Essentials Plus

What is Cyber Essentials?