Smartdesc worked with ACEVO to audit their IT and Digital systems against the 50 or so technical controls and measures that make up the Cyber Essentials standard.
The standard deems it mandatory that all computers are running on current, supported operating systems, and that devices are kept up to date, encrypted, and protected against viruses, malware, and ransomware. It also requires that complex password policies are in place, and two factor authentication is enabled, including for other 3rd party applications.
Results
ACEVO met the standards, and are now fully Cyber Essentials Certified. Not only does this give their leadership team, members and trustees peace of mind, but it also outwardly demonstrates that they have invested the time to take cyber threat seriously and covered the most important bases to secure their systems. The certification is tested and renewed annually, because technology – and cyber threats – never stand still.
Achieving Cyber Essentials has brought numerous benefits to ACEVO, including:
- Peace of mind that the basic security controls are in place.
- A public demonstration of commitment to cyber security.
- Compliance with a nationally recognised certification, developed by the National Cyber Crime Security Centre.
- Renewed and refreshed annually, to cater for the ever-evolving cyber threat landscape.
- A cost-effective process, completed in under 2 weeks.