Cyber Essentials & why more small businesses aren’t qualifying.
According to the latest Government Cyber Security Breaches Survey, of the 2,000 plus businesses surveyed, only 17% recognise Cyber Essentials, with only 5% reporting actual certification. So why aren’t more SMEs becoming certified? The reality is many businesses consider themselves too small to be targeted, underestimating the possibility of automated and supply-chain attacks, or simple phishing scams.
What is Cyber Essentials?
Simply put, Cyber Essentials is an affordable way for businesses of all sizes to protect themselves from cyber-attack. It won’t prevent them, but it will reduce the likelihood of common, automated attacks succeeding.
What kinds of things does it help protect me against?
Reduces the likelihood of common, automated attacks succeeding by removing the straightforward & easy routes attackers use to enter systems.
It will also help with limiting unauthorised access, making sure software vulnerabilities are patched promptly, reducing malware exposure & ultimately, reducing the potential disruption and damage from an incident.
What does it provide me with?
Provides your business an affordable, recognised foundation for improving wider cyber resilience, helping you reduce exposure to common cyberattacks, including phishing, malware and unauthorised access.
It also entitles businesses with a turnover of under £20m to cyber liability insurance, the most important part of which is a 24hr helpline to report a cyber incident, which will provide crisis management and incident response. The cover helps with liability up to a modest £25,000, but means you have that support there if you need it.
Putting controls in place across the five key areas recommended by IASME, the governing body means as a business, you have put in place the basic cyber security measures, that give the most effective protection against common cyber-attacks.
What are the benefits?
Some of the main benefits are:
- Demonstrating build trust with customers and partners that you have essential security controls in place.
- It can provide a competitive advantage during bids and procurement.
- Encourages stronger security practices across devices, software, networks and user accounts.
- Can reduce disruption, financial loss and reputational damage caused by cyber incidents.
Why don’t more SMEs adopt Cyber Essentials?
More SMEs do not adopt Cyber Essentials because the barriers are mainly commercial and behavioural—not because the certification lacks value. Other reasons include postponing unless there is demand in a contract, concern it will expose weaknesses, or simply because it does not prevent every attack. Sadly investment often follows a breach, lost tender or customer demand, when it is too late.
How do I know if I should undertake Cyber Essentials Certification?
There are some simple questions designed to help you think about cyber security within your organisation, prompting you to consider different aspects of security which will protect your organisation against threats. Head to the IASME website link below to access the Readiness Tool. Access the Readiness Tool here: GetReadyForCyberEssentials.
How much does it cost?
Cyber Essentials costs as little as a few hundred pounds, with certification bodies offering free consultations to help you put it into perspective.
Who can help me certify?
There are hundreds of certification bodies. Factory can help you certify. We offer free 30-minute consultations in fact. No obligation, just simple guidance to find out whether it’s right for you & your business.
Get in touch at [email protected].
