What is Cyber Essentials ?
Cyber Essentials is a government-backed cybersecurity certification scheme administered by the UK NCSC (National Cyber Security Centre). It defines 5 essential technical controls that every organization should implement to protect against the most common cyber threats. Two levels exist: Cyber Essentials (verified self-assessment) and Cyber Essentials Plus (independent technical audit). Certification is mandatory for UK government suppliers handling sensitive information.
Key Points
- Firewalls and Internet gateways: network perimeter protection and connected device security
- Secure configuration: modified default security settings, unnecessary services disabled
- Access control: user accounts with minimum privileges, strong authentication
- Malware protection: anti-malware, installation restrictions, sandboxing
- Security update management: patches applied within 14 days for critical vulnerabilities
Why Zaxyr
Zaxyr simplifies obtaining Cyber Essentials certification by automating verification of the 5 technical controls. The platform collects evidence from your network equipment, systems, and patch management tools, and generates the documentation needed for self-assessment or Cyber Essentials Plus audit.