While the sophistication of cyberattacks can vary, most often these attacks are basic and predictable, and exploit the most common and preventable vulnerabilities. By adopting the right security practices, the information inherent in the organisation stands defensible and free from intruders’ hands.
The Cyber Essentials scheme is conclusively designed to help organisations mitigate common cyberattacks by implementing five key security controls. The scheme defines the five technical controls: Firewalls, secure configuration, security update management, user access control, and malware protection to be in place, guarding cyber health, and strengthen an organisation's overall cyber security posture.
To establish baseline security standards, organisations are required to comply with
five basic security controls defined by the scheme:
Use firewalls to help protect systems, networks, and devices against unauthorised access and incoming threats.
Configure systems and devices appropriately by prioritising security settings and reducing unnecessary threat exposures.
Deploy security updates promptly to protect systems and applications against cybersecurity vulnerabilities.
Ensure employees are granted access solely to the devices, systems, and information required to perform their roles.
Implement measures such as application allowlisting and access restriction to unsafe websites to reduce the risk of malware attacks.
Organisations can get Cyber Essentials certification at two levels. The first level involves the applicant organisation running a verified self-assessment (VSA) of the questionnaire defined by the scheme. Upon further verification by an independent assessor, the certification will be awarded if the required criteria are met.
The second level is the Cyber Essentials Plus (CE+) certification, where an on-site or remote technical audit is conducted by an authorised body to provide a higher level of assurance. The pricing level for either of these assessments may vary depending upon factors like the size of the organisation, assessment scope, the time required for completion, and complexity.
ManageEngine is Cyber Essentials Plus certified; the scope includes ManageEngine's UK and EU data centers, all cloud service offerings, their corresponding administrative networks, and excludes all other networks of ManageEngine.
Our suite of IT management solutions can help your organisation meet the Cyber Essentials security control requirements.
Download ManageEngine's Cyber Essentials guide to get:
Fill out the form to download the guide
The complete implementation of the Cyber Essentials scheme requires a variety of solutions, processes, people, and technologies. The solutions mentioned in our guide are some of the ways in which IT management tools can help with the Cyber Essentials requirements. Coupled with other appropriate solutions, processes, and people, ManageEngine’s solutions help implement the Cyber Essentials. This material is provided for informational purposes only and should not be considered as legal advice for the Cyber Essentials implementation. ManageEngine makes no warranties, express, implied, or statutory, as to the information in this material.
The changes to the Cyber Essentials scheme for the year 2026 are as follows:
