CyberSmart Cyber Essentials Plus
Evidence capture, audit and technical checks for Cyber Essentials Plus.
For organisations preparing evidence and technical checks for Cyber Essentials Plus certification.
Prepare evidence and complete Cyber Essentials Plus checks
Cyber Essentials Plus requires organisations to present evidence and undergo external validation of specified technical controls. Keeping track of the application, its stages and outstanding actions can otherwise sit separately from the technical checks needed for assessment.
CyberSmart Cyber Essentials Plus provides a platform for collecting control evidence and tracking certification progress. It also carries out an external audit, with vulnerability scans, external port IP reviews, simulated email attacks and multi-factor authentication testing on listed cloud services.
Where CyberSmart Cyber Essentials Plus is used
The product is used to prepare and submit Cyber Essentials control evidence, follow certification stages and complete the external assessment. Its technical checks apply to device verification, external port IP configurations, email defences and multi-factor authentication on listed cloud services.
Fits within these solutions
Suitable environments
CyberSmart Cyber Essentials Plus is applicable to environments with devices, external port IPs, email defences, browsers, antivirus software and listed cloud services.
Benefits
Organised Evidence Submission
Brings Cyber Essentials control evidence into a platform for assessment.
Clear Assessment Status
Shows current certification stages and the actions still required.
Independent Validation
Provides an external audit alongside specified technical checks.
Risk Mitigation Guidance
Smart Score reporting presents risk information and suggested mitigations.
Capabilities
Control Evidence Capture
Captures evidence for Cyber Essentials controls through a platform.
Certification Progress Tracking
Shows certification stages, progress and the next actions for an application.
External Audit
Conducts an external audit of Cyber Essentials Plus requirements.
Device Vulnerability Scans
Runs vulnerability scans to verify device checks.
Email Defence Testing
Uses simulated email attacks to test email defences.
MFA Testing
Tests multi-factor authentication on listed cloud services.
Common Use Cases
Certification Evidence Preparation
Collect evidence for Cyber Essentials controls before submitting an application.
Device Check Verification
Use vulnerability scans to verify the required device checks.
External IP Review
Review external port IP configurations for gaps or vulnerabilities.
Cloud MFA Checks
Test multi-factor authentication on listed cloud services during assessment.