CYBER PROTECTION
What is Cyber Essentials?
Cyber Essentials is a UK Government-backed certification scheme that helps organisations put five important technical controls in place:
Firewalls
Secure configuration of devices and software
Access control, including user permissions and password management
Malware protection
Software updates and patch management
UK government and public sector bodies – mandatory for many central government contracts involving personal data or certain technical products and services
Private sector clients that want assurance their suppliers meet minimum cyber standards before sharing data or systems access
Organisations seeking certain forms of cyber insurance – insurers often offer more favourable terms to Cyber Essentials-certified businesses
Supply chain prime contractors that require sub-contractor certification as standard
Certification is achieved through a self-assessment questionnaire, reviewed and verified by an accredited Certification Body. As a Certification Body ourselves, The Rybec Group manages that entire process for you.
WHO BENEFITS
Who needs Cyber Essentials?
Cyber Essentials is required or strongly expected by:
UK government and public sector bodies – mandatory for many central government contracts involving personal data or certain technical products and services
Private sector clients that want assurance their suppliers meet minimum cyber standards before sharing data or systems access
Organisations seeking certain forms of cyber insurance – insurers often offer more favourable terms to Cyber Essentials-certified businesses
Supply chain prime contractors that require sub-contractor certification as standard
Even where it is not a formal requirement, Cyber Essentials provides a clear, independently verified statement that your business takes basic cyber security seriously. For many prospective clients, that matters.
OUR SERVICES
Cyber Essentials vs Cyber Essentials Plus
Cyber Essentials
Cyber Essentials is achieved through self-assessment. You provide answers about your controls and Rybec Group, as your IASME Certification Body, reviews and verifies them.
Cyber Essentials Plus
Cyber Essentials Plus goes further. It covers the same five control areas, but instead of self-assessment, a qualified assessor tests your systems directly to verify that the controls are implemented correctly and working as intended.
Which is best for me?
Some procurement frameworks and larger clients specify Cyber Essentials Plus rather than the standard certification. If you are not sure which you need, The Rybec Group will tell you based on what you have been asked for.
CERTIFICATION
What Cyber Essentials means for your business
Certification is not a tick-box exercise. Businesses with Cyber Essentials in place are better protected against the most common cyber attacks, such as phishing, ransomware and credential theft. They can answer procurement questions with confidence. And they have a documented baseline of security controls that forms the foundation for further work, including ISO 27001, if that becomes a requirement.
QUICK ANSWERS
Frequently asked questions
Q: What does it mean that The Rybec Group is a Certification Body?
It means we are authorised by IASME, the body that manages the Cyber Essentials scheme, to assess and certify organisations ourselves. We are not a third party that refers you elsewhere. We manage the whole process and issue the certification directly. Many cyber security consultancies cannot do this.
Q: How long does Cyber Essentials take?
For most businesses, the process takes between two and six weeks depending on the current state of your controls and how quickly any gaps can be addressed. The Rybec Group gives you a realistic timeline at the outset.
Q: What if we do not pass first time?
It is not uncommon for businesses to need to address one or two areas before certification is confirmed. Where possible, The Rybec Group identifies these gaps before the formal assessment so that the submission is as strong as it can be. We will not leave you to figure out remediation on your own.
Does Cyber Essentials need to be renewed?
Yes. Certification is valid for one year and needs to be renewed annually. The Rybec Group provides renewal support as part of our ongoing compliance services.