What is Cyber Essentials?
Cyber Essentials is a certification scheme backed by the Government to reduce cyber vulnerability throughout the supply chain. When implemented correctly, the security controls outlined should prevent 80% of cyber-attacks. Launched in 2014 by the National Cyber Security Centre, the Cyber Essentials scheme highlights the five basic cyber security controls that all businesses should be implementing:
Being certified is a great first step in being GDPR prepared. Cyber Essentials Certification is evidence that you have carried out the appropriate steps to protect your business and your data.
Benefits of Cyber Essentials Certification
Increased credibility and reputation
Achieving Cyber Essentials Certification shows your commitment to protecting your own data and that of your customers and clients. The certification increases the reputation of your business and shows your organisation is taking preventative actions to reduce the threat from cyber-attacks.
Win government contracts and open business opportunities
If your organisation is looking to bid for government contracts you will need to be Cyber Essentials certified. New business opportunities are opened as it demonstrates to business partners and new clients that you are working in a safe and secure digital environment.
Eligible for free cyber insurance cover
Showing that your organisation is compliant with the scheme means that you could be eligible for free cyber insurance cover.
How does Cyber Essentials help with being GDPR ready?
To be GDPR ready you will need more than the Cyber Essentials basic technical controls. Additional topics to cover include, training staff, assessing business risks, dealing with incidents, and handling operational issues. As part of our consultancy service Cheeky Munkey will locate any non-compliant areas and assist in resolving this before the formal assessment.
We also recommend that following this, your organisation acquires specialist legal advice on the GDPR as on any other data protection issue, as all advice from Bulldog IT on GDPR is not legal advice, so it should not be treated as such.