This preview site is paused.Pages show a saved copy — forms and admin are off until it is woken.Contact Vital Hike
CCN Logo

What is the Cyber Essentials scheme?

Cyber Essentials is a UK government scheme supported by the NCSC that sets out five basic security controls that can protect organisations against 80% of common cyber attacks.

The scheme helps organisations of any size demonstrate their commitment to cybersecurity and is designed to be straightforward and affordable. The IASME Consortium manage the scheme on behalf of the NCSC, licensing certification bodies to carry out the assessments.

CCN Limited work in partnership with IT Governance, a licensed certification body, and can guide you through the entire certification process.

Why do I need Cyber Essentials?

Prevent around 80% of cyber attacks

Correctly implementing five basic security controls will protect your organisation against the most common cyber threats.

Demonstrate supply chain security

Certification demonstrates your commitment to data protection and cybersecurity.

Win new business

The credential strengthens your reputation and improves competitive positioning for contracts.

Drive business efficiency

Your organisation can concentrate on core objectives while maintaining protection against prevalent threats.

Reduce cyber insurance premiums

Insurance providers view certified organisations more favourably.

Work with the UK government & MOD

Cyber Essentials enables government collaboration; Cyber Essentials Plus permits MOD engagement.

Find Out More

Choose the certification that’s right for you:

  • You are confident defining the scope of your assessment for the entire organisation.
  • You own and operate your entire IT infrastructure.
  • You are familiar with the five Cyber Essentials controls and how to implement them.
  • You have previously achieved Cyber Essentials certification and want to renew, and your scope has not changed.
  • You have a more complex or expansive IT infrastructure.
  • You can define your scope but have additional questions.
  • Your network is more cloud based or a shared office environment.
  • You know how to configure your IT to improve security but will need assistance to fully define the five key controls.
  • Certification can apply to organisation's full enterprise IT or just a subset. Either way, the scope of the network needs to be clearly defined before the certification process can get underway. Please refer to the "certification process stages" section of the Cyber Essentials Guide.
  • As part of the certification process and scope, CCN will carry out a pre-assessment security audit on your network which will include a review of your staff awareness methodology and internal security processes. On completion, you will be advised as to any changes that may be required.
  • Once the organisation has determined its scope and the Audit is complete the next step to certification is to complete a self-assessment questionnaire (SAQ). This comprises 70 questions across 8 sections (including the 5 control areas); all sections must be passed for certification to be awarded.
  • Additional assessment such as internal and external vulnerability scans against the public – facing infrastructure patch levels and system configuration will be carried out along with a security and anti-malware test to ensure the systems are resistant to malicious email attachments and web binaries.

Related Services from CCN

Cyber Security Essentials Certification

Get in touch today to learn more:

Other ways CCN can help your business…

Find the right people to take your team to the top with CCN Recruitment.

CCN Recruitment