Cyber Essentials: your entry ticket to the UK market
Cyber Essentials is backed by the UK National Cyber Security Centre (NCSC). UK public-sector buyers and a growing number of private companies require it from suppliers, including Ukrainian software vendors.
The five technical controls
- Firewalls and secure boundary configuration
- Secure configuration of devices and cloud services
- User access control, MFA for cloud services
- Malware protection
- Security update management — critical patches within 14 days
Basic Cyber Essentials is a verified self-assessment; Cyber Essentials Plus adds independent technical verification (vulnerability scans, workstation tests). The certificate is valid for 12 months.
Why it is easy to add to SOC 2
All five controls are already implemented during SOC 2 and ISO 27001 readiness. What remains is device inventory per the scheme's rules, completing the self-assessment and passing verification. BALTUM is a Cyber Essentials certification body, so we perform the assessment and issue the certificate ourselves — no queues or intermediaries. See Cyber Essentials explained.
What you get
- Scope definition and device inventory
- Configuration review against the 5 controls
- Self-assessment completion and support
- Preparation for Plus technical verification
- Remediation of findings
- Cyber Essentials / Plus certificate