Cyber Essentials (UK)

Cyber Essentials is a self-assessed certification (Cyber Essentials Plus adds a hands-on technical audit) required for many UK public sector contracts. It focuses on five technical controls: firewalls, secure configuration, user access control, malware protection, and security update management. The control set is published in the NCSC 'Requirements for IT infrastructure' (Montpellier, current edition).