Cybrid demonstrates its commitment to Cyber Security with Cyber Essentials Plus
It’s a sad fact that a majority of businesses have inadequate or outdated Cyber Security protection and despite the fact that almost half of UK firms were hit by a cyber breach or attack in the past year, we are still having to work hard to convince business owners to invest in IT security.
With the upcoming EU GDPR legislation coming into effect in May this year, a failure to invest could lead to large fines if a breach occurs which could have easily been avoided through basic cyber security protections.
We take IT security very seriously at Cybrid and our ‘secure by design’ principle starts with our own systems. Our customers, suppliers and staff entrust their data and systems to us and we work hard to ensure we keep them safe.
This is why we engaged with our partners at CyberSmart to ensure our processes, systems and procedures were secure by design and constantly kept protected. To demonstrate this, we have recently achieved the Cyber Essentials Plus certification.
Cyber Essentials is a UK government backed scheme that provides five security control principles that, according to the UK government, could prevent “around 80% of cyber-attacks” and is the basis for creating a secure digital environment.
Cyber Essentials Plus is the highest certification and included a thorough network vulnerability scan and penetration test of our networks.
While this sort of certification can sound daunting and expensive; it’s simply a matter of having the right computer security software, policies and settings. If an IT system is installed correctly, configured securely, kept patched and up-to-date, and has suitable computer security software installed, then achieving such a certification should be just a formality. In reality, we are finding that new clients are coming to us after a breach to find that their existing IT service provider or internal IT team lacked the knowledge, skills and tools to achieve this, leaving them exposed to cyber breaches. Often, cleaning up after a breach is much more time consuming and expensive than securing the network in the first place. And then there’s the reputational damage to consider.
What’s worse is that statistics show that a large majority of network security breaches go undiscovered and those that are discovered are often brought to light by third parties while the infected business sat oblivious to their situation.
So, it’s fair to say that ‘secure by design’ is a great place to start and being able to demonstrate your cyber security credentials with a Cyber Essentials certification is a powerful statement to clients!
If you want to know more about how to assess the status of your cyber security and achieve Cyber Essentials certification, then speak to one of our team.