Map to other frameworks
Use intelligent automation and AI to avoid duplication of work, easily meeting NHS DSPT, NHS DTAC, HIPAA and ISO 27001 requirements in tandem.
Meet every requirement for
Cyber Essentials
Assuric gives you the scoping, controls and self-assessment to get Cyber Essentials certified, all in one place.
- Full scoping with CE assessors
- Controls
- End-to-end certification
Trusted bysecurity teams
Features
Everything you need for
Cyber Essentials
Expert hands-on support
Know exactly what's in scope
We help you understand which of your systems and devices are in-scope for the assessment, and get you ready for certification.
Audits, assurance & certification
From first draft to certificate
We take you through the self-assessment questionnaire and all the way to your Cyber Essentials certificate. Once certified, we can audit your setup for Cyber Essentials Plus.
Asset & device management
Every device tracked
Manage all of your devices and assets in one centralised system, with an owner on every asset. Built-in deadlines and notifications keep asset information up to date with the standards.
Automated compliance tracking
Clear controls for your size, product and team
Identify which security controls you need, and how to implement them. Guidance built around your setup, including device management and endpoint monitoring where it's needed.
Benefits
Get certified all in one platform
In-platform Cyber Essentials Questionnaire
Complete the official IASME Cyber Essentials assessment, with an automated flow linked to key parts of your workspace. You will have your answers graded by an assessor, receive feedback and certification all in one platform.
Seamlessly scale to Cyber Essentials Plus
Complete an audit of your Cyber Essentials work, to achieve Cyber Essentials Plus, with help from Assuric’s assessment and audit partners.
What our customers say
“We couldn't speak highly enough of both the Assuric team and the platform itself, which is incredibly easy to use, and with the skill and hardworking nature of the Assuric team. They've been a key component in accelerating our progress and deployments!”
Maks Kozarzewski
COO, VitVio
“The Assuric platform is a game changer in the clinical risk management field. It has been carefully designed to make the job of a CSO significantly more streamlined. The team are excellent and responsive to any product suggestions I have requested, and it has been a pleasure to work with them.”
Paul Llewellyn
CCIO, Accenture
“Assuric has been fantastic in helping us quickly and safely navigate regulatory compliance in the UK. From completing Cybersecurity requirements to DSPT, DCB0129, and DTAC, the team was supportive, extremely knowledgeable, and the platform made everything quick and straightforward. A separate regulatory company we consulted at the beginning even remarked on how quickly we achieved compliance!”
Katie Baker
Director UK & Ireland, Tandem
Frequently asked questions
Cyber Essentials is a cyber security certification scheme backed by the UK government that helps organisations protect themselves against common online threats and cyber attacks. Becoming Cyber Essentials certified will help you to protect your organisation, whatever its size. Certification will build trust with your customers and is required to meet the NHS DTAC.
Cyber Essentials Plus extends the Cyber Essentials (basic) certification by requiring an independent assessment of your organisation's cyber security measures. This includes a technical audit of your systems (vulnerability scan and penetration test). Cyber Essentials Plus is a more comprehensive certification and is recommended for organisations that handle sensitive data or have a higher risk profile.
Cyber Essentials (CE) is recommended by the UK Government and is an excellent way to protect your organisation against common cyber threats and enhance information security - building trust with customers and procuring organisations. CE is also a mandatory requirement for the Data Security and Protection Toolkit (DSPT) and the NHS DTAC.
Cyber Essentials is not a legal requirement, but it is recommended by the UK Government and is a requirement for some government contracts. Having Cyber Essentials certification also enhances the credibility and trustworthiness of your company, and shows you handle your customers' data with care and attention. Cyber Essentials (basic) is also a requirement for NHS Digital's Data Security and Protection Toolkit (DSPT) and the NHS DTAC. An external penetration test / vulnerability scan is also required for these, both of which we offer at Assuric.
Cyber Essentials (basic) is achieved by completing a self-assessment questionnaire. To pass the scheme and achieve certification, your organisation must implement a framework of baseline cyber security controls and best practices. Cyber Essentials Plus is then achieved by undergoing a technical audit of your organisation to verify controls are in place.
To ensure ongoing compliance and protection against new or evolving threats, organisations must renew their certification annually.
Cyber Essentials covers five technical control areas: firewalls, secure configuration, security update management, user access control and malware protection. Your scope sets which devices, cloud services and networks those controls apply to.
Yes. Cyber Essentials is a requirement for both the NHS DSPT and the NHS DTAC. In Assuric, your Cyber Essentials work is mapped across, so the evidence you already hold also counts towards DSPT, DTAC, HIPAA and ISO 27001.
Assuric takes you from scoping to certificate in one place. We help you work out which systems and devices are in scope, show you the controls you need for your size and setup, and take you through the self-assessment questionnaire. Once you're certified, we can audit your setup for Cyber Essentials Plus with our assessment and audit partners.
Ready to get certified?
Book a call and we'll scope your Cyber Essentials with you, so you know exactly what's in scope from day one.