Document summary
This document provides detailed information about the services offered to customers utilising our Cyber Essentials Accreditation service. This information clarifies the scope of items included within the overall service provision.
Core service provision
Included in our Advanced Cyber Security service is the certification fee that is required to have the questionnaire assessed via a certified IASME assessor, this is to the current Cyber Essentials standard.
Our team will undertake the following activities to support a customer's organisation in achieving Cyber Essentials (CE) certification:
- Initial review and assessment of relevant systems, controls and security measures that are implemented
- Report back findings as a gap analysis, highlighting areas that must be corrected in order to achieve CE certification
- Working together to build an action plan to remediate the required items
- Whereby we are the IT Managed Services Provider, a list of items that can be completed within the service specification will be provided and any outside of this will be given an estimated cost for implementation
- Once all required gaps have been addressed, our team will assist in completing the self assessment questionnaire
- Contact a certified CE assessor and co-ordinate all activities
- Assist with any clarification queries or recommendations
Exceptions
The following items are specifically exlcuded from this service:
Creation of internal organisational policies
Implementation of physical security controls, such as access badges or CCTV
Conducting penetration testing or vulnerability assessments
Assisting with any other compliance standards such as ISO:27001
Investigating or remediating any pre-existing security issues
Cyber Essentials Plus support
If a customer wishes to undertake Cyber Essentials Plus certification, this can be completed at an additional cost. These certifications are based upon an estimate and will be billed based upon time and materials due to their complex nature.
Cyber Essentials Plus must be completed within 90 days of achieving Cyber Essentials accreditation if this is desired.