Cyber Essentials Plus involves a two-step process: initiating the online assessment and undergoing a subsequent technical audit of the systems by an accredited assessor. This encompasses a diverse set of user devices, all internet gateways, and all servers offering services to unauthenticated internet users. During the audit, an assessor will systematically test an appropriate random sample of these systems, typically around 10 percent, and determine if further testing is warranted.

How can you achieve the Cyber Essentials Plus Certification?

Businesses complete the Cyber Essentials Plus audit within three months of obtaining the Cyber Essentials basic certification. You have to have achieved the basic certification first.

The Cyber Essentials Plus assessor that conducts the audit will need to conduct on-site visits to your head office and a representative selection of other offices to carry out the requisite test framework.

The costs associated with a Cyber Essentials Plus certification audit is dependent upon the size and intricacy of your organisations network and what you need to do internally before the audit to adhere to the framework.

Read more about both the Cyber Essentials and Cyber Essentials Plus certification here.