
14 April 2022 | The Bureau
Firms Getting Serious About Cyber Security
More firms are building their cyber defences and earning the Cyber Essentials Certification accreditation. Certified firms, particularly those with a Cyber Essentials Plus accreditation, demonstrate that they are taking data and cyber security seriously and worthy of their clients’ confidence and loyalty.
It introduces a different mindset throughout the office which ends-up rubbing-off on everyone, making the office, staff and the data being managed a lot safer.
Certification requires firms to examine existing security processes and how they can be improved. Anything can be improved and by changing and or refining processes and standards that are either too weak or would just look more impressive by being upgraded to above and beyond, always goes down well with clients and regulatory bodies.
The certification process requires applicants to answer a series of IT and data security questions forcing firms to really question current data and cyber security procedures and to not just assume they are already in place.
Understanding the security stance being taken, the firewall settings, logins, virus prevention, passwords, data security protection routines, cyber incident reporting, software patching and controls, security policy standards for employees’ use of office technology, including mobiles and more, all lead to stronger security.
The Government has worked with the Information Assurance for Small and Medium Enterprises (IASME) consortium for several years, creating a set of basic technical controls to help organisations protect themselves against common online security threats. The full scheme, launched on 5 June 2014, is suitable for all organisations of any size, in any sector and backed by industry bodies like Federation of Small Businesses, the CBI and a number of insurance companies.
There are many online links to information about the ‘Certification Scheme’, including the link on the National Cyber Security Centre Website at https://www.ncsc.gov.uk/cyberessentials/overview that describes it thoroughly.