To help drive awareness of the importance of corporate IT security, the UK government has introduced the Cyber Essentials Scheme. This accreditation establishes a baseline of acceptable conduct – and helps certified organisations minimise their security risks.
To achieve the certification, your business must demonstrate a commitment to the protection of personal information. You will also be assessed for preparedness in dealing with common security threats including malware infections, social engineering attacks and hacking.
To raise security standards
With Cyber Essentials Plus, your business has a definite standard to plan against. This helps to ensure that investments are properly targeted for maximum benefit to you and your customers.
To trade with the government
Any business planning to bid for public sector contracts must be Cyber Essentials Plus certified. No certification, no government trade.
To demonstrate commitment to your customers’ privacy
As a government-recognised certification, Cyber Essential Plus demonstrates your commitment to customer privacy and security. Potential customers will know that they can trust your business to secure information properly.
To renew your certification
To ensure your business continues to uphold the highest standards of IT security, the Cyber Essentials Plus certification must be renewed once per year.
Cyber Essential Plus is a two-phase process. The first step requires you to complete a self-certification questionnaire. Our team of experienced analysts can help you with the initial paperwork.
Full infrastructure audit
The second phase of the compliance process sees our consultants analysing your network resources and protections to verify they match the answers provided in the questionnaire. We will also identify vulnerabilities that need to be addressed.
In depth testing
Your network security provisions will be tested to confirm that meet the required standard. We will also assess your employees to ensure they demonstrate an appropriate level of awareness of how to store and handle sensitive data correctly.
With you every step of the way
From initial application, through to final certification, Fidus engineers are on hand to guide you through the entire process. We’ll help you bring security up to the required standard and help you plan a strategy for renewal next year.
Penetration testing reveals your most sensitive network vulnerabilities – so you need a partner you can trust. Fidus Information Security are an NCSC CHECK Green Light and TIGER scheme approved consultancy. Our cyber security experts hold some of the most recognised certifications in the industry, including CREST Certified Tester and Senior Security Tester. Fidus is also a Cyber Essentials verified company. Every assessment we perform is carried out according to UK industry approved methodologies (OWASP, PETS, NIST) along with our own internal testing frameworks.
More than just identifying security vulnerabilities, our cyber security experts are on hand to help you fix them too.
Certified Security Consultants
Our CREST and TIGER approved team holds a range of industry-leading security certifications including OSCP, CCT, SST and CISSP
Easy to Understand Reports
We’ll ensure that your executives and technical teams properly understand our assessment findings using plain-English reporting.
Fixed Price Proposals
The price you’re quoted is the price you’ll pay. Our quotes are broken down into a detailed costing table so you know exactly what to expect.
Other approaches we've witnessed have included convoluted steps and commonly ends with incorrect information being handed to the consultant assigned to the engagement.
Our approach to security involves a qualified security consultant through the entire process to ensure quality, accuracy and consistency.
“Becoming CREST certified shows Fidus’ commitment to ensuring we maintain the highest standards of policies and procedures within our company.” Fidus Information Security have gained CREST accreditation for penetration testing services. We are extremely proud to announce that we are now a Council for Registered Ethical Security Testers (CREST) accredited company for penetration testing services. […]
Exploiting the eRosary Application In this post we’re going to cover a trivial full account takeover vulnerability our team identified within the new eRosary application, whilst placing an order for the watch! The ClickToPray eRosary beads are advertised as ‘an interactive, smart and app-driven device that serves as a tool for learning how to pray […]