Certifications

Cyber Essentials is the ‘stage one’ certification, which involves responding to the Cyber Essentials questionnaire which covers the requirements for basic technical protection from cyber attacks.

Cyber Essentials PLUS is the ‘stage two’ certification which can only be conducted once you have achieved Cyber Essentials certification status. This includes a more thorough assessment which includes an internal vulnerability scan.

For Level 1 – verified assessment, organisations access a secure portal to answer around 160 questions about their security. The assessment is marked by a Certification Body and a pass or fail is returned to the organisation.

Note that a valid Cyber Essentials or IASME Cyber Baseline certification is a prerequisite for obtaining the IASME Cyber Assurance standard.

For Level 2 – audited, an independent assessor conducts an on-site audit of the controls, processes and procedures covered in the IASME Cyber Assurance standard. The audited version gives a higher level of assurance and is pass or fail.