Get ready for Cyber Essentials, without the guesswork

01What it is

Cyber Essentials is the government-backed minimum standard for cyber security. It covers five technical controls: firewalls, secure configuration, security update management, user access control and malware protection. Readiness is the work you do before the assessment, so you pass with confidence.

Mersek does not issue the certificate. An IASME-licensed Certification Body assesses your answers and issues it. My job is to get you ready.

02Who it’s for

• Law firms that need Cyber Essentials for a legal aid contract
• Firms bidding for public contracts that ask for it
• Businesses whose clients or insurers have asked for it
• Anyone who wants a recognised baseline for their security

03What you get

• A gap review against the current Cyber Essentials requirements (version 3.3)
• A written fix plan in plain English, with the most important items first
• Help understanding and answering the assessment questions
• A final check before you submit

04How it works

1. We have a free call about your business and your deadline.
2. I review your setup against the five controls.
3. I close the gaps for you with the Fix Pack, or work alongside your IT person.
4. You submit your assessment to the Certification Body, which assesses it and issues the certificate.

05The five controls, in plain English

Cyber Essentials checks five basic protections. This is what each one means for your business.

1. FirewallsStops strangers on the internet reaching your computers, like a locked front door.
2. Secure configurationRemoves default passwords and switches off things you don't use, so there are fewer ways in.
3. Security update managementFixes known holes in your software quickly, before attackers can use them.
4. User access controlEach person only gets the access they need, with two-step sign-in.
5. Malware protectionStops viruses and ransomware running on your devices.

06What the whole thing costs

Two separate costs, so nothing is hidden: my readiness support (see the price box) and the certificate fee, which you pay directly to the Certification Body.