Written by Claire Greathead

15th February 2022

• Cyber Essentials

Share this article

The Cyber Essentials scheme is getting a new look, in order to support modern organisations and stay ahead of the ever-shifting threat of cybercrime. This overhaul of the technical control requirements outlined in the scheme reflects the way in which businesses are choosing to operate in 2022.

This update represents the biggest change to the Cyber Essentials scheme since it first launched back in 2014. Its revisions are set to help businesses defend against evolving cybersecurity threats and challenges, including the growing threat of ransomware attacks on UK businesses. It also represents the speed of digital transformation within modern businesses, typified by the increased adoption of cloud-based services and remote working.

What is Cyber Essentials, and how has it changed?

Developed by the National Cyber Security Centre (NCSC), Cyber Essentials is a certification scheme that supports both small and large organisations to protect themselves against online threats and demonstrate a clear commitment to cybersecurity for customers and stakeholders.

In the latest update, the scheme has undergone a major technical review to help businesses maintain their cyber hygiene against the evolving threat landscape. Revisions to the use of cloud services, multi-factor authentication, password management, home working and security updates are among the main notable changes to the scheme.

NCSC Deputy Director for Cyber Skills and Growth, Chris Ensor, commented on the updated scheme, saying:

“The landscape in which organisations are operating in cyber space is constantly changing, and this major refresh of the technical controls reflects the cyber security challenges of today.

“We’ve strengthened the Cyber Essentials scheme so that it continues to meet evolving threats and the increased risk of ransomware, and I would encourage UK businesses of any size to take part in order to protect themselves from the most common attacks.”

Many of these changes come following feedback from assessors and scheme applicants, as well as through consultation with the Cloud Industry Forum.

Why is Cyber Essentials necessary?

By utilising and adhering to the Cyber Essentials scheme, businesses of all sizes can learn how to defend their data, and use internet connects and devices securely. It can advise organisations on how to control data access and protect against common threats like ransomware.

Through the scheme, businesses can reassure their customers, clients and stakeholders that the data they hold is protected from attack. It can also help to attract new custom with the confirmation that stringent cybersecurity measures are in place.

In addition to this, the new Cyber Essentials scheme will also be incorporating a renewed pricing structure, in order to better reflect the increasingly complicated nature of assessments across many organisations.

By achieving Cyber Essentials certification, businesses can:

• Obtain a clear picture of their existing cybersecurity level, and get a roadmap for improving it
• Reassure customers that the necessary measures are in place to protect their data
• Attract new business with the safety net of independently verified cybersecurity measures
• Apply for any government contracts which require Cyber Essentials certification

With cybercrime reaching new heights during the COVID-19 pandemic, it’s increasingly important that businesses utilise a comprehensive framework to ensure that they protect their assets and bolster their digital defences. Achieving Cyber Essentials certification sends a clear message that your business takes cybersecurity seriously, and prioritises data protection for its customers.

If you need help ensuring your business data is secure, you can get in touch with the experts at SRM today. Click here to contact a member of our team and find out more.