Cyber Essentials Plus

What is Cyber Essentials Plus?

Cyber Essentials is for all organisations, whatever sector you’re in. Implementing these controls will help your organisation defend against the most common forms of cyber-attack.

Additionally, If you intend to apply for government contracts, achieving a Cyber Essentials Certification is often a mandatory requirement.

The Scheme itself focuses on Internet-originated attacks against an organisation’s IT system, based on five key security controls.

1. Boundary firewalls and internet gateways – these provide a basic level of protection where a user connects to the Internet. A firewall will help to keep attackers or external threats from getting access to your system.
2. Secure configuration –systems need to be configured to ensure that the current design and build state of the system is known, good & trusted.
3. Access control – it is important that only the appropriate personnel have access to systems and at the appropriate level.
4. Malware protection – this doesn’t just protect you against viruses, worms and key loggers, but also nuisance programs. It is important that virus and malware protection is installed and is kept up to date.
5. Patch management – managing upgrades for software applications and technologies. A patch management plan can help you handle changes efficiently, ensuring the latest supported version of applications is used and all the necessary patches supplied by the vendor been applied.

By choosing QMS to assist you with implementing the appropriate cyber security controls, you will benefit from support and advice throughout the process, an internal assessment of your cyber security processes and an onsite technical vulnerability scan of your devices.