--- title: What’s the difference between Cyber essentials and Cyber Essentials Plus? description: Cyber threats are ever growing and businesses are beginning to recognise the value of seeking accreditation like cyber essential and cyber essentials plus - this article explains the key differences between the two and helps you recognise what is right for your business. image: https://info.solsoft.co.uk/hubfs/Stock%20images/Cyber%20Security%20on%20the%20Mechanism%20of%20Metal%20Gears..jpeg --- [![Solsoft](https://info.solsoft.co.uk/hubfs/SolSoft_march_2018/Images/logo%20(1).svg "Solsoft")](http://www.solsoft.co.uk/) - [About us](http://www.solsoft.co.uk/About-us.aspx) - [Our services](http://www.solsoft.co.uk/Our-services.aspx) - [IT Managed Services](http://www.solsoft.co.uk/Our-services/IT-Managed-Services.aspx) - [Managed Security Services](http://www.solsoft.co.uk/Our-services/Managed-Security-Services.aspx) - [Secure web dev & management](http://www.solsoft.co.uk/Our-services/Secure-web-dev-and-management.aspx) - [Contact us](http://www.solsoft.co.uk/Contact-us.aspx) - [Support login](http://www.solsoft.co.uk/Support-login.aspx) # Blog # What’s the difference between Cyber essentials and Cyber Essentials Plus? Posted by [Mike Ralston](https://info.solsoft.co.uk/blog/author/mike-ralston) on Aug 8, 2018 10:31:09 AM ![](https://info.solsoft.co.uk/hubfs/0.jpg) Find me on: [Facebook](https://facebook.com/mike.ralston.1401) [LinkedIn](https://linkedin.com/in/mike-ralston-0664131/) - [Tweet](https://twitter.com/share)   ![Cyber Security on the Mechanism of Metal Gears.](https://info.solsoft.co.uk/hubfs/Stock%20images/Cyber%20Security%20on%20the%20Mechanism%20of%20Metal%20Gears..jpeg)   In 2014 the UK government's Department for Business, Innovation and Skills released a government-endorsed scheme called Cyber Essentials, to help businesses adopt good practices in information security, ensuring the protection of data, and for companies to understand how that data can be used, secured, or compromised. At a basic level the scheme ensures that **data is protected from common cyber threats online**. The goal of the certification is to protect company information from internet threats. However, Cyber Essentials is a basic level of investigation from which to build on – it is **not** a comprehensive cyber security strategy. Organisations can gain one of two Cyber Essentials accreditations: ## *So, what is the difference between Cyber Essentials and Cyber Essentials PLUS?* ### Cyber Essentials The scheme is mostly aimed at business who do not have their own dedicated IT teams working 24/7 to monitor threats. The UK government reports that cyber-attacks cost companies considerable amounts of money and long periods of disruption and company downtime. For example, if you suffered a ransomware attack and you couldn’t access your business data or email, would you have a plan on how to stay operational? If not, you’d benefit from Cyber Essentials certification - if only to identify existing security weaknesses you have. Cyber criminals don’t only target large organisations - because they are able to invest in protection – often they target smaller businesses, exploiting weaknesses in IT infrastructure and software. Cyber Essentials addresses the basics and shows you how to protect against the most common attacks. Organisations who have the capacity within their own IT departments can conduct their own Cyber Essentials certification, or they can hire a certified external, third-party to do the checks for them. Before completing the Cyber Essentials assessment the third party assessor will do a security vulnerability scan of your IT infrastructure. The information gathered will guide any remedial actions, ensuring your company will meet the five technical controls (Firewall, Secure Configuration, User Access Control, Malware Protection, Patch Management) to demonstrate good practice of information governance. ### Cyber Essentials PLUS Cyber Essentials can be completed by an organisations own IT department or a certified, external third party if they don’t have the capacity or technical expertise in-house. The organisation completes a self-assessment questionnaire and the responses are independently reviewed by an external certifying body. Cyber Essentials PLUS has the same requirements of Cyber Essentials, except the system tests are carried out by an external certifying body, using tools and techniques which an in-house team may not have access. Independent auditors, those who offer Cyber Essentials PLUS, quite simply know what they are doing - and have the experience of working with multiple comparable organisations, going through the same process. However, it’s important to remember that Cyber Essentials and Cyber Essentials Plus only provide you with a “point in time” assessment of your organisation. Only an ongoing managed security service can provide you with daily peace of mind, not only that your system and data are protected, but also that should an event occur, you will we will be covered in terms of incident response, investigation, process definition and protection.  Topics: [Business](https://info.solsoft.co.uk/blog/tag/business), [Compliance](https://info.solsoft.co.uk/blog/tag/compliance), [Business Security](https://info.solsoft.co.uk/blog/tag/business-security), [Security](https://info.solsoft.co.uk/blog/tag/security), [IT](https://info.solsoft.co.uk/blog/tag/it), [MSSP](https://info.solsoft.co.uk/blog/tag/mssp), [Managed Security Services](https://info.solsoft.co.uk/blog/tag/managed-security-services), [Bristol](https://info.solsoft.co.uk/blog/tag/bristol), [England](https://info.solsoft.co.uk/blog/tag/england), [UK](https://info.solsoft.co.uk/blog/tag/uk), [Cyber](https://info.solsoft.co.uk/blog/tag/cyber), [Cyber Attack](https://info.solsoft.co.uk/blog/tag/cyber-attack) ## Reducing Risk - Maximising Security ### Protect the future of your business. The risk of cyber attacks is continuing to grow year on year for businesses small and large. *So after receiving a lot of requests, we have decided it's time to change things - we're excited to share with you **The Solsoft Blog**. We have created it to keep you and your business safe from the ever-growing global threats, we bring you the latest and most important information in the world of business IT security.* Stay Safe: - GDPR Advice - Tips for your business - Preventing attacks - Compliance Updates - Much, much more... ### Subscribe to Email Updates ### Recent Posts ### Posts by Topic - [IT (7)](https://info.solsoft.co.uk/blog/tag/it) - [UK (7)](https://info.solsoft.co.uk/blog/tag/uk) - [Bristol (6)](https://info.solsoft.co.uk/blog/tag/bristol) - [England (6)](https://info.solsoft.co.uk/blog/tag/england) - [Compliance (5)](https://info.solsoft.co.uk/blog/tag/compliance) - [Business (4)](https://info.solsoft.co.uk/blog/tag/business) - [Cyber (4)](https://info.solsoft.co.uk/blog/tag/cyber) - [Business Security (3)](https://info.solsoft.co.uk/blog/tag/business-security) - [Cyber Attack (3)](https://info.solsoft.co.uk/blog/tag/cyber-attack) - [Managed Services (3)](https://info.solsoft.co.uk/blog/tag/managed-services) - [Security (3)](https://info.solsoft.co.uk/blog/tag/security) - [MSP (2)](https://info.solsoft.co.uk/blog/tag/msp) - [MSP 501 (2)](https://info.solsoft.co.uk/blog/tag/msp-501) - [MSSP (2)](https://info.solsoft.co.uk/blog/tag/mssp) - [Managed Security Services (2)](https://info.solsoft.co.uk/blog/tag/managed-security-services) - [Awards (1)](https://info.solsoft.co.uk/blog/tag/awards) - [Channel Futures (1)](https://info.solsoft.co.uk/blog/tag/channel-futures) - [Cyber Essentials (1)](https://info.solsoft.co.uk/blog/tag/cyber-essentials) - [Cyber Essentials Plus (1)](https://info.solsoft.co.uk/blog/tag/cyber-essentials-plus) see all ### Follow Me # Get in touch To discuss a proactive, business aligned IT and IT security solution, that guarantees to reduce cost, increase productivity and manage risk, get in touch today. - [About us](http://www.solsoft.co.uk/About-us.aspx) - [Our services](http://www.solsoft.co.uk/Our-services/IT-Managed-Services.aspx) - [Contact us](http://www.solsoft.co.uk/Contact-us.aspx) - [Support login](http://www.solsoft.co.uk/Support-login.aspx) - [Customer Login](https://ww4.autotask.net/ClientPortal/Login.aspx?ci=801137) Copyright © 2017 Solsoft Solsoft Group Ltd (Solsoft) is a company registered in England and Wales. Registered number: 07768426. Registered office: Queen Charlotte House, 53-55 Queen Charlotte Street, Bristol BS1 4HQ.