Cyber Essentials
– This level of certification is awarded on the basis of a completed self-assessment questionnaire. This evaluates your processes against five basic security controls:
- Boundary firewalls and internet gateways
- Secure configuration
- User access control
- Malware protection
- Patch management
Gives you protection against the most common cyber attacks. The certification process at this level is straightforward easy to follow.
Cyber Essentials Plus
– This level offers a higher level of assurance. It contains the same elements as Cyber Essentials, evaluating your processes against five basic security controls – plus:
- A simulated phishing attack to test that the five key controls are working in practice
- A build review of representative workstations and mobile devices
- Evidence of compliance to increases the validity of certification
For this level the verification of your cyber security is carried out independently by a Certification Body.