Cyber Security

Cyber security aims to prevent cyber attacks and protect sensitive data.

Cyber Security protects computer hardware, software and networks from attacks that could lead to theft of information and damage to technologies.

Implementing basic cyber security measures protects your business’s valuable data. Planning, implementing and monitoring various processes to protect your business, can reduce the risk of unauthorized access to your business systems.

There are a variety of different cyber attacks that pose a threat to businesses. Cyber criminals may carry out these attacks for a variety of reasons and target a variety of different businesses and individuals.

Hackers will usually carry out these attacks in order to obtain sensitive data about an organisation or to plant a harmful virus. A cybercriminal attempts to gain access to confidential information in order to cause harm to the organisation or individuals affected.

A recent survey shows “UK businesses who identified an attack, the most common threat vector was phishing attempts (83%).” (gov.uk)

Phishing attacks usually come in the form of a fraudulent email that is disguised as a legitimate message. These attacks will attempt to trick a user into handing over sensitive data and information. Hackers will then use this information to cause harm in some way to individuals and organisations.

To find out more about phishing emails and how to protect your business against them, read our blog post on this topic.

A vulnerability test is an assessment and review of a business’s security system, in order to identify potential weaknesses. The results of this test can indicate vulnerabilities in order of severity, which in turn can provide a clear course of action and recommendations on how to strengthen network and system security.

Multi-factor authentication or MFA requires a user to provide a password and at least 1 other form of verification to confirm your identity and gain access to an account. This increases the difficulty for an unauthorised person looking to gain access to a device or cloud-based data.
Examples of authentication usually include additional passwords in the form of randomly generated numerical codes. This, coupled with a strong, secure password, adds an extra layer of protection to your devices and accounts.

Cyber Essentials provides organisations with a basic certification that showcases the protection an organisation has in place to prevent a variety of the most common cyber attacks.

To gain Cyber Essentials certification, an organisation must meet a set of criteria. There are a range of processes and security measures that need to be in place in order to pass this certification and ensure an organisation is protected.

Cyber Essentials certification must be renewed yearly to ensure organisations stay up to date with the latest criteria set and ensure the business networks stay secure.

Cyber Essentials for many businesses is the first step in creating a reliable foundation for cyber security. Once Cyber Essentials certified, the next progression for an organisation may be to get a Cyber Essentials Plus certification.

Cyber Essentials Plus is an extension of the Cyber Essentials certification. The main difference between the two is that Cyber Essentials Plus involves a hands-on technical audit of the organisation’s network.

In order to apply for a Cyber Essentials Plus, an organisation must have become Cyber Essentials certified within the last 3 months.

Some of the key benefits of a business becoming Cyber Essentials certified include:

• Protection from around 80% of common cyber attacks.
• Reassurance for customers and suppliers that a business’s networks are secure.
• Gain a trustworthy reputation when it comes to cyber security.
• Provides a clear picture of an organisation’s cyber security level.
• Some Government contracts require Cyber Essentials certification.

Cyber Essentials and Cyber Essentials Plus certificates last for 12 months before they expire. After 12 months, the certification needs to be renewed.