You've had the warning. Turn it into a plan the board can see.
A short, calm review of where you stand, and a fix list in order. Something your board can read in a few minutes.
Book a 20-minute callWhat this usually looks like
When the board asks what changes
If you have had a security scare, the next question from the board is usually the same: what are we doing about it? The honest answer is often a list that lives in people's heads.
The gap assessment turns that into one page the board can read, and a fix list in order of importance for your IT team or IT firm. Cyber Essentials gives it a clear standard to work to.
If personal data was involved, you may need to report it to the ICO. Take advice on that.
What this is not
This is not incident response. If something is happening now, call your IT firm and your insurer first. Come to us when you are ready to look at what comes next.
The offer
A half-day gap assessment for Cyber Essentials or Cyber Essentials Plus
- Up to 50 staff£695
- 51 to 250 staff£995
- Above 250 staff, or several sitesQuoted
Prices exclude VAT. On site in Oxfordshire, Berkshire, Buckinghamshire, Wiltshire and Gloucestershire, or online anywhere in the UK. The certificate itself is issued, and charged for, by a licensed Certification Body.
What you get
Your report within 5 working days:
A one-page board summary
Where you stand against the five Cyber Essentials controls, in plain English.
What attackers can see of you online
An external exposure report, from public sources only.
A fix list, in order
Clear actions for your IT team or IT firm, most important first.
Who leads the work
Sean Muirhead, founder, oversees every gap assessment. CISSP, CISM, CISA. Former Group IT Security Officer for a FTSE 250 insurer. 25 years in cyber security. More about Sean
How it works
- A 20-minute call to check scope and fit.
- A half-day visit or video session.
- Your report within 5 working days.
- Your IT team or IT firm makes the fixes.
- A re-check, if you want one.
- You certify with a licensed Certification Body.
Questions
- Do you investigate what happened?
- Your IT firm or an incident response specialist handles that. We look at where you stand now and what to fix next.
- Do you certify us?
- A licensed Certification Body issues the certificate. We get you ready to pass it first time.
- We already have an IT firm. Do we still need this?
- Often, yes. We work alongside your IT firm and give you an independent view.