Cyber Essentials
What is Cyber Essentials?
Cyber Essentials is a UK government-backed cyber security certification, developed by the National Cyber Security Centre (NCSC) and delivered through IASME. It's built around five core technical controls, and the government estimates that having them in place blocks around 80% of common cyber attacks. It's increasingly expected by clients, insurers and government contracts as proof that a business takes its cyber security seriously.
The certification covers five key areas:
- Firewalls & Internet Gateways – Protecting the boundary of your network from unauthorised access.
- Secure Configuration – Ensuring devices and systems are set up correctly, with unnecessary software and accounts removed.
- User Access Control – Making sure only the right people have access to the right data and systems.
- Malware Protection – Deploying and maintaining anti-malware and antivirus defences.
- Security Update (Patch) Management – Keeping software, operating systems and firmware up to date with the latest security fixes.
At HIGS Solutions, we can guide your business through the process from start to finish — helping you meet the requirements, close any gaps, and achieve certification with confidence.
Cyber Essentials Plus
Cyber Essentials Plus builds on the standard certification by adding an independent, hands-on technical audit. Rather than a self-assessment, a certified assessor carries out vulnerability scans, configuration checks and testing to verify your controls are genuinely working as intended.
It's the right choice for businesses that want a higher level of assurance — whether that's for larger contracts, insurance requirements, or simply demonstrating a stronger commitment to protecting client and business data.
We support businesses through every stage of Cyber Essentials Plus too, from initial readiness assessment right through to the final technical audit.
