Cyber Security Services

Whether you are looking for a company to help you with Cyber Essentials, a friendly and helpful security consultant or a penetration test, we offer a range of cyber security services to help your business and we’ll work with you to understand the specific risks and how to manage them effectively. Our consultants have a wide range of knowledge and experience across several sectors which allows us to deliver bespoke solutions for any type of business.

Receive peace of mind in knowing that we are looking out for you and your business, browse our range of cyber security services below to see how we can help you stay secure and strengthen your security posture against the latest cyber threats.

Cyber Essentials Basic

The Cyber Essentials scheme was created by both the UK Government and the industry to help design a basic set of requirements that all businesses could apply with limited experience of cyber security. Businesses that work to apply those requirements can then publicly demonstrate their commitment to cyber security via the certification.

The process of achieving this certification has been designed to be as easy as possible to achieve while ensuring that best practices are in place as well as affordable. It has been proven to show that companies that have the certification can mitigate up to 80% of known cyber threats.

How does it work?

The scheme is based upon a set of five security controls which, when correctly deployed, will provide you with a level of protection from the most common cyber security threats. These controls apply to a defined scope, which could be part or all of your company, depending upon your needs.

By ensuring that your boundary firewalls are configured to only allow authorised inbound and outbound traffic, will help to effectively protect your business against cyber threats.

By ensuring that security controls have been agreed upon and put in place when installing computers and mobile/network devices, will help ensure that configurations in default settings are reduced.

Making sure that user accounts are configured with the level of access that is needed will help reduce network-wide threats. Using least privilege access should be applied to all accounts.

Making sure proper malware protection is in place on all devices will help you protect your business against cyber threats such as ransomware and viruses which may run throughout the network.

Keeping your software up to date with the latest security updates is important as well as helping to reduce the changes of devices being compromised.

Cyber Essentials Plus

In order to achieve the Cyber Essentials Plus certification, you must have already obtained the self-assessed certification and successfully pass the plus certification within three months, which, if not already achieved, can help you with if you have not yet achieved this. Obtaining the plus certification and implementing the required controls could shield your business from up to 80% of the common threats from the internet.

Adopting the Cyber Essentials scheme is likely to become a major requirement to win business in many sectors in the future – and to demonstrate this, from 1 October 2014, the government has required suppliers bidding for certain information-handling contracts to be Cyber Essentials certified.

The certification is backed by the industry, as well as the business support and lobbying organisation the Federation of Small Businesses. A number of insurance companies are also starting to offer incentives for organisations that conform to the scheme.

A company can gain certification badges which allow a company to advertise the fact that it adheres to a government-endorsed standard.

Certification

The certification consists of five baseline controls that businesses should have in place to reduce the risk of data breaches from internet-based attacks, these being:

Achieving Cyber Essentials Plus

As part of the assessment, the company will be required to pass an external and internal vulnerability assessment performed by staff from InfoSec Governance. This vulnerability assessment can be performed onsite or remotely via a Microsoft Teams session.