About this Framework
Cyber Essentials Plus builds upon the Cyber Essentials certification by requiring an independent technical assessment of implemented cybersecurity controls. Qualified assessors perform vulnerability assessments, device testing, malware protection verification, account security checks, and workstation inspections to validate that Cyber Essentials requirements are operating effectively in practice. Cyber Essentials Plus provides a higher level of assurance than self-assessment certification.
Key Control Domains
Firewalls and Internet Gateways
Secure Configuration
User Access Control
Malware Protection
Security Update Management
Technical Verification
Vulnerability Assessment
Endpoint Security
Who Needs This?
- Organizations requiring higher assurance certifications
- Government contractors
- Critical suppliers
- Organizations handling sensitive data
- Businesses seeking independently verified cybersecurity controls
Compliance Benefits
- Independent validation of cybersecurity controls
- Higher assurance than standard Cyber Essentials
- Improved trust with customers and partners
- Enhanced protection against common cyber attacks
- Supports supply chain security requirements
Assessment Details
Share this Assessment
Share this permanent link with your team, clients or auditors.
https://grcopilot.app/frameworks/cyber-essentials-plus