Free Assessment

We need to understand the size of your organisation, the number of homeworkers you have and what the scope of Cyber Essentials will cover in your organisation.
Organisation Name
If you would like to include your organisation name on the cover of this report, please write it here. This will not be used for marketing and all form entry data and reports are deleted automatically 30 days after submission.
Do you have any homeworkers?*
For the purposes of Cyber Essentials, a home worker is defined as an individual who spends more than 50% of their working hours working from home. It does not include individuals who are required to travel to other destinations to carry out their jobs.
The scope of Cyber Essentials for your organisation*
Cyber Essentials typically covers the whole of the organisation (which is preferable) but there are some situations where it is not possible to include everything. For example: BYOD networks that do not enforce security controls on personal devices would not be included in the scope.
Is the annual turnover of your organisation less than £20million?
If your annual turnover is less than £20m you may be eligible for free Cyber Insurance once you have successfully achieve certification to Cyber Essentials.
- Yes – Annual turnover is less than £20m
- No – Annual turnover is greater than £20m

Save and Continue Later

This includes, computers, workstations, laptops, servers, tablets and smartphones. It is really important that you know what devices are used by the organisation so you can ensure they are kept secured and up to date.
Do you have a list of all hardware devices in use in the organisation?*
All computers, servers, firewalls, routers, laptops and mobile devices such as smartphones and tablets should be included in this.

Save and Continue Later

You should maintain a list of all approved software used by your organisation. Having a software inventory helps to ensure that you have appropriate licensing in place for the software that you use and that it is supported. This should also extend to firmware that runs on routers, firewalls, and other hardware used by your organisation.
It is important to make sure that all software is patched and updated regularly to avoid exposure to any potential vulnerabilities that may enable criminals to exploit weaknesses in the software.
Do you have a list of all software and firmware in use by your organisation?*
Ideally you want to ensure that your inventory is detailed, including the version of the software or firmware as well as the product name.

Save and Continue Later

Firewalls and routers are used to protect your network from the internet and to prevent unauthorised access to your local network.
Do you have a firewall (or a router with an inbuilt firewall) between your internal network and the internet?*
You may have a dedicated firewall appliance, or you may have firewall functionality incorporated into your internet router. In either case, this should be configured to protect your internal business network from the internet.

Save and Continue Later

You may have services on your internal network that you allow staff, customers, clients or support organisations to access from the internet. Where these exist, you need to ensure that you only permit access to the very least required for that service to work.
This may include email servers, web servers and VPN servers or remote access solutions (such as Remote Desktop Services). Typically this is done with configuration rules on your firewall.
Do you have services enabled that are accessible externally from the internet?*
This may include email, web services and VPN servers.
Do you maintain a list of published services and review it regularly?*

Save and Continue Later

:In order to ensure that your devices are not exposed to unnecessary vulnerabilities, it is important that software and functionality that is not used on your devices is removed and / or disabled.
Have you disabled or removed from all your devices any software or services that are not needed or used by your organisation?*
This may include services on routers, firewalls, network storage devices, or connected IoT devices, as well as computers, laptops, servers, tablets and smartphones.
Have you removed unused accounts from all devices in your organisation?*
Often devices are shipped with default accounts that are enabled to allow you to configure and set up the device when you first power it on. These accounts must be removed (or disabled) as they pose a significant security risk if left in place and active.
Have you disabled auto-run or auto-play on all systems?*
When you connect a removable storage device (such as a USB pen drive, external hard-drive, SD-Card or camera) or use a CD or DVD, your computers must be configured not to automatically run any software application or file.

Save and Continue Later

The questions in this section are around the processes that you have in place for managing both standard user accounts and administrator user accounts.
Do you have a formal documented policy or procedure for how your organisation deals with Starters, Leavers, and Movers?*
Do you have a standard process that you follow for creating new user accounts?*
This may be as simple as a single step-by-step guide to creating the account or might be more complex involving multiple systems. The key is to ensure that you follow a repeatable process for all account creation.
Does your organisation require that every user has their own username and password and that these are not shared with other users?*
Do you have a process in place for managing administrator accounts?*

Save and Continue Later

Do you have a documented password policy?*
This should describe to users what requirements you have for their passwords (e.g., length, complexity) and the importance of using different passwords on different applications and systems.
Do you make sure that all default passwords are changed on all devices?*
Some devices have a default set of credentials built into them to allow initial configuration and setup. All new devices should have such defaults changed or removed to prevent attackers being able to connect to your devices.

Save and Continue Later

Are all of your computers, your laptops, and your mobile phones protected by malware by using one of these options? (Select the one that applies.)
Malware Protection*
Are all of your organisation's computers, laptops, and mobile phones protected from malware by using one of these options? (Select all that apply.)
- My organisation has anti-virus software installed
- My organisation limits installation of applications to an approved group
- My organisation uses an application sandbox
Where you use an app store (such as Google Play Store or Apple App Store) are users restricted to only install signed / certificated applications?
Where you use application sandboxing to protect against malware, are there any access restrictions in place?*

Save and Continue Later

Cookie	Duration	Description
__stripe_mid	1 year	A token set by Stripe (payment provider) to facilitate the payment of online orders.
__stripe_sid	30 minutes	A token set by Stripe (payment provider) to facilitate the payment of online orders.
_GRECAPTCHA	5 months 27 days	This cookie is set by Google. In addition to certain standard Google cookies, reCAPTCHA sets a necessary cookie (_GRECAPTCHA) when executed for the purpose of providing its risk analysis.
cookielawinfo-checbox-analytics	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checbox-functional	11 months	The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checbox-others	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-necessary	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-performance	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy	11 months	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.
woocommerce_cart_hash		Helps us determine when cart contents/data changes
woocommerce_items_in_cart		Helps us determine when cart contents/data changes.
wp_woocommerce_session_	2 days	Contains a unique code for each customer so we can retrieve the cart contents for a returning user

Cookie	Duration	Description
__cfduid	1 month	The cookie is used by cdn services like CloudFare to identify individual clients behind a shared IP address and apply security settings on a per-client basis. It does not correspond to any user ID in the web application and does not store any personally identifiable information.
1P_JAR	Various	Used to collect information about how visitors use our site which we use to compile reports to help us make improvements. The cookies enable the collection of information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.
DV	Various	Used to collect information about how visitors use our site which we use to compile reports to help us make improvements. The cookies enable the collection of information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.
NID	Various	Used to collect information about how visitors use our site which we use to compile reports to help us make improvements. The cookies enable the collection of information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited.

Free Cyber Essentials Readiness Assessment

Free Cyber Essentials Readiness Assessment

Step 1 of 9 - Your Organisation

About us

LINKS

CONTACT

CONTACT US