An increasing number of businesses are seeking help to achieve Cyber Essentials or Cyber Essentials Plus to bid for new projects as well as retain the contracts they already have.
It is fast becoming a standard requirement of the tender process for many projects and partnerships. In fact, you must be Cyber Essentials certified to work with the MOD or Central Government.
In addition, local authorities and grant or funding opportunities are also starting to follow suit as they insist on the accreditation to proceed with bids.
What is Cyber Essentials and why does it keep coming up in bids?
Itโs a self-assessment in the form of a questionnaire that assesses Cyber Security. The government backed scheme ensures you have implemented basic levels of protection against Cyber Attacks, forcing you to assess the level of security throughout your network and implement the necessary changes before you can become certified.
Why do so many contracts and bids now insist on Cyber Essentials?
Cyber Security really isnโt something businesses can afford to ignore.
With an increase in attacks, the threat of losing critical data is real, so implementing a security strategy is vital. But letโs be honest, although you know deep down you should be taking it seriously, thereโs nothing like the risk of losing a big client or project, to promote it to the top of the priority list.
Achieving the accreditation will;
- Help prevent and mitigate the impact of Cyber Attacks.
- Allow you to bid for MOD and Government projects.
- Bid for grants or funding opportunities that require the certification.
- Increase your chances of winning business from other Cyber Essentials accredited organisations wanting to partner with like minded businesses.
- Show your customers and prospective customers that you take cyber security seriously.
How long does Cyber Essentials certification take?
Although itโs a self-assessment questionnaire, that doesnโt mean itโs a two-minute job to fill it in.
At first glance, the 64 questions may not seem too daunting but reading through them will help you establishing whether you are in the position to answer them correctly. Baring in mind, becoming compliant may require investment of time and money updating or replacing systems.
It is recommended to tackle Cyber Essentials proactively rather than reactively. Working through the questions systematically will give you time to consider the options and cost of any investment needed.
Can you complete the assessment without expert help?
As the process is self-assessment, you can do it yourself, but we would advise working with an expert like your IT provider. Rather than guess or try and muddle through, allocating time to work with experts who understand your systems will make the process a lot easier.
As well as understanding the terminology the assessment body will be looking for, they will also be able to work with you to rectify any gaps in your security and offer solutions to fix them. This could mean replacing hardware, addressing permissions and clarifying what aspects of the business are in scope.
What is Cyber Essentials Plus?
In addition to Cyber Essentials, the next level of assessment is Cyber Essentials Plus. This is a technical audit of your systems that are in-scope for Cyber Essentials. An assessor will visit the business and conduct a series of tests on your systems to establish the level of security in place.
Itโs worthwhile finding out which level of Cyber Essentials is required when bidding for projects to ensure you hold the correct one.
Don’t leave it until the last minute
If your business needs to be Cyber Essentials certified, donโt leave it to the 11th hour. There may be more involved than you realise.
- Take some time to understand what Cyber Essentials is (and what’s involved).
- Review the Cyber Essentials questionnaire here.
- Take an honest look and assess the true level of cyber security in your business.
- Decide whether your business will need Cyber Essentials to keep or win new business.
- If you decide to pursue Cyber Essentials, get some expert support to guide you through it.
If you need help achieving Cyber Essentials or Cyber Essentials Plus call us on 01908 410041 or send us an email.
Frequently asked questions
Do all government contracts require Cyber Essentials?
No. But MOD and many central government contracts do, and more local councils are starting to follow suit. Always check the tender or funding documents.
Which level do I need – Cyber Essentials or Plus?
It depends. Some contracts only require the basic certification; others mandate Cyber Essentials Plus. Double-check whatโs specified in the tender.
How long does it actually take to get certified?
That varies. The questionnaire itself doesnโt take long, but fixing any problems uncovered can take weeks or even months if upgrades are needed.
Can we just handle this in-house?
You can. But most businesses find it smoother (and faster) with expert help to make sure nothing gets missed.
What happens if weโre not certified?
You might not even be allowed to bid. In some cases, you could risk losing existing work if clients update their requirements.
