In early 2023, Sorted Communications gained Cyber Essentials certification.
This certificate from the National Cyber Security Centre assures our clients that as a business, we take cyber security seriously. We aim to reduce the risk of an attack on our systems. Let’s go into a bit more detail about what the certification involves. How will it help keep our data safe and confidential?
Why does Cyber Essentials certification matter?
When we think of computer hacking, our minds tend to go to people in hoodies sat in dark rooms hunched over a laptop. This Hollywood-style image of a lone computer hacker is somewhat outdated. It is increasingly common for hackers to gather into groups or collectives – perhaps the most notorious being the one called ‘Anonymous’.
The larger the group, the more dangerous it can be. Hackers can be looking for any information they can steal and then use or sell. This can include bank information, username/password combinations or confidential product information.
From the largest corporations to the smallest businesses, everyone is vulnerable to attack. This means it is vital that we are aware of any vulnerabilities in our own systems. The Cyber Essentials certification matters because it shows we have looked at our processes and taken steps to make sure our network and security are as tight as possible. So by ensuring nothing is left to chance, we can be confident that our data and confidential client data is also secure.
How secure can a remote business be?
Good question! As you may know, Sorted Communications is made up of professionals working hard across the UK and Europe. We don’t have a physical office. So this means we don’t need to worry about people passing data around on any physical storage devices. We do, however, need to make sure all our online systems are protected.
As part of the Cyber Essentials application process, we reviewed our network security, password standards, information security and ‘bring your own device’ policies to make sure everything was up to scratch. We also refined our team member onboarding process. This means we can be confident that all new team members who join us are fully aware of the requirements of Cyber Essentials before they start.
Everyone who works with us follows a clear set of instructions designed to ensure our systems are secure. These include a requirement for computers to be protected by a password of a certain complexity. All computers used for business purposes must have the most up-to-date firewalls and virus scanners installed. Sometimes it’s simple steps like these that turn out to be the most important actions in protecting systems and data.
How did we achieve Cyber Essentials?
To gain the certification we completed a self-assessment. This looked at everything from having up-to-date software and malware protection on all the machines we use, through using complex passwords and two-factor authentication to tightly controlling access to systems.
Our answers were then checked and validated by a qualified assessor from the NCSC. They confirmed we were able to “…achieve compliance with the Cyber Essentials profile”. In other words, we can show our clients and employees that we have looked into all aspects of cyber security in our business and we take it seriously.
Cyber Essentials every day
Cyber Essentials is something we consider every day as we log in and work with clients. There are many questions to ask when hiring an agency, and ensuring they take cyber security seriously should also be on your list. If you are interested in working with an agency which includes online safety and data storage security a part of their everyday process, then drop us a line.
Have you found this useful? Why not sign up to our newsletter for more guidance, hints and tips and communications insights? Join our newsletter today..