Popular on PrZen
- Samaritan House of San Mateo County Gives Over 2000 Backpacks with School Supplies to Students in Need
- ITSMA Announces Finalists for the 2019 Marketing Excellence Awards
- Saranas Recognized as One of Houston's Most Innovative Companies
- JUSTICE DEPARTMENT ORDERS DEATH PENALTY RESTORED - Five men are to be scheduled for execution
- Todd Caponi Joins VentureSCALE as New Managing Director
- MBA Mortgage's Bob Barlow Receives Disabled Veteran of the Year Award
- Crown Sterling Disrupts Encryption Protocol with the Discovery of Quasi Prime Predictive Algorithm
- Institute of Industrial and Systems Engineers teams up with UL for customizable online lean Six Sigma 4.0 training
- Courtyard by Marriott St. Louis Brentwood, Missouri Opens
- AUA Med School Expands UK Clinical Program for Students
Small and medium-sized enterprises (SMEs) are as much at risk from data breaches as large organisations. According to the Cyber Security Breaches Survey 2018, 42% of small businesses identified at least one breach or attack in the last 12 months. This is a significant problem which is set to increase as criminals find new ways to digitally delve into organisations for increasingly valuable personal information.
However, it is not an insurmountable problem and SMEs can protect themselves against common cyber-attacks by undertaking a certification process. Cyber Essentials is a government and industry backed scheme to help all organisations protect themselves against common cyber-attacks. In collaboration with Information Assurance for Small and Medium Enterprises (IAMSE) they have set out basic technical controls for organisations to use which is annually assessed. Here are four reasons to get certified:
1. Mitigate cyber risks
Whilst no security strategy can stop 100% of attacks, the aim is to mitigate the risk as much as possible. The majority of attacks exploit basic weaknesses in IT systems and software, and these can be quite straightforward to defend against. Being fully Cyber Essentials compliant mitigates 80% of the risks faced by businesses such as malware infections, social engineering attacks and hacking. The Cyber Essentials scheme aims to provide businesses with a strong base from which to reduce the risk from these prevalent cyber-attacks.
2. Identify weak security links in your supply chain
As the saying goes, you are only as strong as your weakest link and this is especially true when dealing with third parties that are outside of your domain of control. The 2017 Data Risk in the Third-Party Ecosystem study found that 56% of respondent organisations had been affected by a third-party data breach, up from 49% the previous year. This should be a major concern to any organisation as GDPR makes it clear that organisations are accountable for data breaches caused by any third-party service providers they appoint to handle data.
Organisations, or in GDPR speak, 'controllers', must only appoint third party 'processors' who can provide sufficient guarantees that the requirements of the GDPR will be met and the rights of data subjects protected. By using a third party that has achieved certification via a scheme such as Cyber Essentials or IASME governance standard, organisations can show that they have taken steps to conduct due diligence within its supply chain. Certification demonstrates that information security procedures within a third-party processor are certified to be the same, or more comprehensive than, the information security procedures followed by the controller organisation for the data involved in the contract.
3. Show commitment to cyber security
By displaying the Cyber Essentials badge on its website, an SME can demonstrate to customers, partners and investors their commitment to cyber security. This is particularly beneficial for organisations that are storing personal information on customers and employees, or hosting commercially sensitive data. Through certification, SMEs can proactively provide sufficient guarantees that regulatory requirements will be met and the rights of data subjects protected.
4. Competitive advantage
Improving cyber security within its supply chain is a priority for UK Government. It has decreed that suppliers must be compliant with the Cyber Essentials scheme in order to bid for contracts which involve the handling of sensitive information and the provision of certain technical services. However, Cyber Essentials presents a competitive advantage to certified SMEs when competing for all business or tendering for public sector proposals as they will be able to demonstrate their security credentials and their diligence towards defending the integrity of their customers' data.
Supported at every stage
Achieving safety and compliance doesn't have to be a costly or complex project. By utilising an online information security management system (ISMS) that incorporates Cyber Essentials, SMEs can undertake a certification route guided by a virtual online security officer (VOSO) as part of their wider cyber security measures. This will help the organisation to coordinate all security practices in one place, consistently and cost-effectively. Additionally, SMEs can take advantage of the expertise of online cyber security consultants at a fraction of the cost of a full time in-house security specialist or a team of consultants.
Certification has many benefits; it ensures standardisation within the supply chain and is a good differentiator for SMEs who provide services as it shows a diligence to information security. The UK National Cyber Security Centre has taken a leadership role in providing the technical expertise for the Cyber Essentials scheme, which ensures that it encompasses the county's best technical insight and experience. Cyber Essentials certification can help SMEs implement strong, cyber security hygiene practices and benefit from the new digital world.
Chiltern House 45 Station Road Henley-on-Thames OXON RG9 1AT
+44 1491 845553
Latest on PrZen
- Work 365 Sync for Self-Service and Provisioning Automation
- Disruptive Startup Award @ Stanford
- Refereum rewards Dauntless players over USD $3,000 in prizes
- Durante Rentals Makes the Inc. 5000 List for Seventh Straight Year
- Thiel College's safety program one of two Pennsylvania institutions recognized by top credentialing organizations
- The United States Legal 500 Name Recognizes Fennemore Craig's Real Estate Practice
- America's Fastest-Growing Private Companies: Revealed
- Threshold Named among the Nation's Top Companies on the 2019 Inc. 5000
- Digital Media Solutions Secures Sixth Consecutive Ranking On Inc. 5000 List
- Guide to renting a luxury villa in Corfu
- Tourico Vacations Adds New Booking Platform With Discounted Home Rentals 8-40% Savings Over Competition
- Destiny Carries & LFG Wins Praise for Offering First-Class Destiny Carries and boosting for all Destiny Players
- Evolve IP® Named For Seventh Time to the Inc. 5000 List of Fastest-Growing Private Companies
- Chris Janson to Headline Subaru Country Freedom Festival at the Port of Los Angeles October 19
- Transcend Security Secures High Rank On Acclaimed Inc. 5000 List Of The Fastest Growing Private Companies In America for 2019
- Automation Intellect Raises Funding Round Led by StartFast
- California Advertising Company Celebrates 20th Anniversary
- VORAGO Technologies Receives NASA SBIR Award for Latch-up Protection IC
- Saranas Recognized as One of Houston's Most Innovative Companies
- Conspire Web Services reduces cloud backup costs by up to 25x