Cyber Essentials Plus

What is Cyber Essentials Plus?

To help drive awareness of the importance of corporate IT security, the UK government has introduced the Cyber Essentials Scheme. This accreditation establishes a baseline of acceptable conduct – and helps certified organisations minimise their security risks.

To achieve the certification, your business must demonstrate a commitment to the protection of personal information. You will also be assessed for preparedness in dealing with common security threats including malware infections, social engineering attacks and hacking.

Why do I need Cyber Essentials Plus?

To raise security standards

With Cyber Essentials Plus, your business has a definite standard to plan against. This helps to ensure that investments are properly targeted for maximum benefit to you and your customers.

To trade with the government

Any business planning to bid for public sector contracts must be Cyber Essentials Plus certified. No certification, no government trade.

To demonstrate commitment to your customers’ privacy

As a government-recognised certification, Cyber Essential Plus demonstrates your commitment to customer privacy and security. Potential customers will know that they can trust your business to secure information properly.

To renew your certification

To ensure your business continues to uphold the highest standards of IT security, the Cyber Essentials Plus certification must be renewed once per year.

Our Approach

Questionnaire completion

Cyber Essential Plus is a two-phase process. The first step requires you to complete a self-certification questionnaire. Our team of experienced analysts can help you with the initial paperwork.

Full infrastructure audit

The second phase of the compliance process sees our consultants analysing your network resources and protections to verify they match the answers provided in the questionnaire. We will also identify vulnerabilities that need to be addressed.

In depth testing

Your network security provisions will be tested to confirm that meet the required standard. We will also assess your employees to ensure they demonstrate an appropriate level of awareness of how to store and handle sensitive data correctly.

With you every step of the way

From initial application, through to final certification, Fidus engineers are on hand to guide you through the entire process. We’ll help you bring security up to the required standard and help you plan a strategy for renewal next year.

Why Fidus?

Penetration testing reveals your most sensitive network vulnerabilities – so you need a partner you can trust. Fidus Information Security are an NCSC CHECK Green Light and TIGER scheme approved consultancy. Our cyber security experts hold some of the most recognised certifications in the industry, including CREST Certified Tester and Senior Security Tester. Fidus is also a Cyber Essentials verified company. Every assessment we perform is carried out according to UK industry approved methodologies (OWASP, PETS, NIST) along with our own internal testing frameworks.

Remedial Support

More than just identifying security vulnerabilities, our cyber security experts are on hand to help you fix them too.

Certified Security Consultants

Our CREST and TIGER approved team holds a range of industry-leading security certifications including OSCP, CCT, SST and CISSP

Easy to Understand Reports

We’ll ensure that your executives and technical teams properly understand our assessment findings using plain-English reporting.

Fixed Price Proposals

The price you’re quoted is the price you’ll pay. Our quotes are broken down into a detailed costing table so you know exactly what to expect.

The Industry Average

Other approaches we've witnessed have included convoluted steps and commonly ends with incorrect information being handed to the consultant assigned to the engagement.

The Fidus Way

Our approach to security involves a qualified security consultant through the entire process to ensure quality, accuracy and consistency.

Trusted by

From the Blog

All Articles

Corporate 29 January 2020

Fidus achieve CREST Accreditation

“Becoming CREST certified shows Fidus’ commitment to ensuring we maintain the highest standards of policies and procedures within our company.” Fidus Information Security have gained CREST accreditation for penetration testing services. We are extremely proud to announce that we are now a Council for Registered Ethical Security Testers (CREST) accredited company for penetration testing services. […]

Research 19 October 2019

ClickToPray eRosary Account Takeover

Exploiting the eRosary Application In this post we’re going to cover a trivial full account takeover vulnerability our team identified within the new eRosary application, whilst placing an order for the watch! The ClickToPray eRosary beads are advertised as ‘an interactive, smart and app-driven device that serves as a tool for learning how to pray […]

All Articles

Request a Call Back

Would you like to speak to us over the phone? Just submit your details and we’ll be in touch shortly. You can also email us if you would prefer – [email protected]

I would like to discuss:

“Oysta is very happy with the support, service and dedication of the Fidus team. Working with the Oysta team every step of the way, not only did they check all security on the device, they also provided feedback on the quality of the hardware. I will be working with Fidus again.”

Mario Zuccaro, Founder and CEO, Oysta Technology

June 2019

“We have been really pleased with the service provided by Fidus. We have found them to be extremely easy to work with. We also felt their fee structure was reasonable. We would recommend Fidus to anyone looking for a PCI pen testing partner.”

Andy Phillips, Inspired Outsourcing

May 2019

“Great service. Gave us exactly what we needed, as promised.”

Philip Cunnington, TalkPlus NHS

January 2019

“We were extremely pleased with the service, knowledge and professionalism shown by Fidus. After the remediation phase, we then ran a phishing exercise with them to remind staff of the need to be vigilant with external email communications. I would have no hesitation in using or recommending Fidus in the future due to the quality of work carried out at a great price.”

Graeme Thistlethwaite, ICT, Business Change and Business Support Manager

“Fidus provided a high quality penetration service at a reasonable price … communications were great … the Pen test team flexed around us and our other commitments to get the job done. Thanks!”

Darren Crombie, CEO, Upstream Outcomes

October 2018