CE requires you to self-assess the five aspects of your infrastructure and operations – Access Control, Firewalls, Malware Protection, Secure Configuration and Network Management, and Upgrading Software and Patching. The self-assessment requires you to demonstrate your compliance with implementing the guidelines in your organisation. The self-assessment is done by
responding to an elaborate questionnaire.

This is where we come in. We provide you with the awareness necessary for you to be able to handle this by yourself, appropriately.

​​

INTRODUCTION:
Topic: Understanding Cyber Essentials

• Brief overview of Cyber Essentials and its purpose.

• Benefits of achieving Cyber Essentials certification.

• Key differences between Cyber Essentials and Cyber Essentials Plus.

​

AREA 1: Access Controls
Topic 1: Protecting Your Organisation with Strong Passwords

• Importance of strong, unique passwords.

• Password management best practices.

• Risks of weak passwords and password reuse.

​

Topic 2: User Access Control

• Principles of user access control.

• Importance of limiting user privileges.

• Managing user accounts and permissions.

​

AREA 2: FIREWALLS
Topic: The Importance of Firewalls and Internet Gateway Protection

• Understanding firewalls and their role in cyber security.

• How to configure firewalls effectively.

• Importance of keeping firewall software up-to-date.

​

AREA 3: MALWARE
Topic: Malware Protection

• Understanding different types of malware.

• Importance of antivirus and anti-malware software.

• Best practices for preventing malware infections.

​

AREA 4: Secure Configuration & Network Management
Topic: Secure Configuration of Devices and Applications

• What is secure configuration and why it matters?

• Common configuration mistakes that create vulnerabilities.

• Best practices for securing operating systems and software.

• What is Network Management and why it matters

​

AREA 5: Upgrading Software and Patching
Topic: Patch Management

• What is patch management and why it's essential?

• Developing a patch management process.

• The risks of unpatched systems.

• Operating System upgrades and patches

• Applications upgrades and patching

• ​

AREA 6: Associated Topics
Topic 1: Data Backup

• The importance of regular data backups.

• Creating effective backup strategies.

• Testing backup procedures.

​

Topic 2: Incident Response Planning

• Importance of having an incident response plan.

• Key elements of an effective incident response plan.

• Testing and updating the incident response plan.

​

Topic 3: Cyber Security Awareness for Employees

• The role of employees in cyber security.

• Common cyber threats and how to avoid them.

• Social engineering tactics and how to protect against them.