IASME Cyber Essentials

Cyber Essentials is a UK Government-backed and industry supported scheme to guide businesses in protecting themselves against cyber threats.

Certification against this scheme is increasingly required for any company bidding for UK government contracts and sometimes their supply chain too. In addition to this, other organisations are now starting to include Cyber Essentials certification as a requirement in their standard supplier contracts.

You can apply here to be assessed against Cyber Essentials and obtain the certification. No uploading of evidence, vulnerability scan or site visit is required but you will need to get a board member to sign a declaration that your answers are true. The cost of self-assessment is £300 + VAT.

Certification against basic level Cyber Essentials

Optional certification against the IASME governance standard.*

All the self-assessment questions are available to download for free. The download of these questions will allow you to ensure that you understand the issues and find out the answers in advance of starting the live assessment. There is no need to pay anything until you are ready to pass.

When you are ready to take the live assessment you can apply here. You will be asked to pay £300 + VAT via PayPal or you can request an invoice. Once payment is received you will be emailed with login details of your account to complete the on-line assessment.

*IASME Governance

At the same time as completing the assessment against Cyber Essentials you have the option of completing questions about the governance in your company. Through these additional questions you can be awarded an IASME governance certificate which is recognised by the UK Ministry of Defence in the Cyber Security Model (CSM) which they will be require all suppliers to achieve later this year:

“The MoD have confirmed that any organisation with the IASME governance self-assessment certification will, in due course, be able to bypass any CSM questions which cover the same ground. ” [A mapping exercise is planned to identify how many of them will fall into this category].

If you have any questions about the process or need help with preparing your company for Cyber Essentials, please contact us.