Cyber Essentials is a UK government-backed scheme that shows your organisation has the basic technical controls in place to protect against the most common cyber attacks.
Zenos is Cyber Essentials certified, and we help our customers get there too. We’ll work through your existing setup, find the areas that need attention and help put the right controls in place. If we’re also your managed IT provider, we’ll keep those standards in place all year.
What Cyber Essentials covers
The scheme focuses on five technical controls:
- Firewalls: protecting your internet connection and devices
- Secure configuration: devices and software set up securely
- User access control: the right access for the right people
- Malware protection: stopping malicious software
- Security update management: keeping software patched
Why organisations get certified
- It’s required for some government contracts and supply chains
- Funders, partners and customers increasingly ask for it
- Some insurers take it into account
- It gives you a clear, independent baseline to work from
How we help
Step 1
Readiness review
We check your setup against the requirements and tell you exactly what needs to change.
Step 2
Fix the gaps
We put the technical controls in place, from MFA and patching to device settings and firewalls.
Step 3
Get certified
We help you complete the self-assessment and submit it to a certification body.
Step 4
Keep it in place
Certification is renewed every year. We help you stay compliant in between, not just at renewal time.
Cyber Essentials or Cyber Essentials Plus?
Cyber Essentials is a self-assessment that’s checked by a certification body. Cyber Essentials Plus covers the same controls but adds a hands-on technical audit by an independent assessor. We’ll help you work out which you need and prepare for either.
You don’t need to be a managed customer
Cyber Essentials can be a standalone project. If you’re happy with your current IT provider, we can still help you get certified, and we’re happy to work alongside them.
Frequently asked questions
How long does it take?
It depends how close you already are. Some organisations are nearly there; others need a few weeks of changes first. The readiness review tells you where you stand.
What does it cost?
There are two parts: the certification fee, which is set by the certification body based on your organisation’s size, and any work needed to get you ready. We’ll give you a clear quote after the readiness review.
How long does certification last?
12 months. You’ll need to recertify each year to keep it.
Can you help with Cyber Essentials Plus?
Yes. We’ll help you prepare for the technical audit. [Confirm how you arrange the Plus assessment.]