Many SMEs start with Cyber Essentials and Cyber Essentials Plus (see page 34). Reaching the first level of Cyber Essentials confirms you have achieved a basic level of compliance with specific standards. “It’s recommended that most businesses should achieve Cyber Essentials Plus,” said Craig. “That’s where an organisation such as Seric or an accreditation body comes in to test your approach; for example, checking that you are patching your system and meeting the five basic standards. As part of the process we scan internally and externally – websites, firewalls, PCs, laptops and other mobile devices. Once everything is satisfactory you get an accreditation
