Cyber Essentials Plus Test Specification V3.2

We noticed through our advisory sessions that applicants are struggling when it comes to some common topics related to the Cyber Essentials Plus tests. Therefore, we decided to create this self-paced online advisory series to help you cover all those elements.

These pre-recorded videos and digital materials are created to provide you with a cost effective advisory sessions that can be accessed anytime, anywhere, at your own speed and at your own schedule, offering you flexibility and convenience over traditional live consultation that might be long and less effective.

You may actually want to purchase and book a live consultancy session at the end of these videos to help you address any specific question related to your organisation and your use case. You can also opt for an advisory session where we will support you with a long term strategic review of your cybersecurity posture and provide you guidance on ongoing business challenges, acting as a mentor to identify potential problems and foster your business growth in a secure environment.

This self-paced online advisory will address the Cyber Essentials Plus Audit process. The tests include the following:

1. A vulnerability scan of the organisation’s external (public) facing IPs.
2. A vulnerability scan of a representative sample of the organisation’s network using National Cyber Security Centre (NCSC) approved software.
3. A check of the anti-malware solution installed on a representative sampled devices using
   1. Benign payload testing delivered by email.
   2. Benign payload testing delivered by website/browser.
   3. A review of the application signing.
4. A check of the use of multi-factor authentication on the organisation’s cloud services
5. A check of the account separation on a representative sampled devices.

The access to the self-paced online advisory will be granted for 6 months from the purchase date.

It is important to notice that each year the NCSC reviews the content of the “Cyber Essentials Plus Test Specification” document and issues a new release if required.

The current version is V3.2.