CyberEssentials Plus
UK baseline security standard requiring verified technical controls.
CyberEssentials Plus is the UK technical baseline that verifies basic cyber controls are in place. It sits above self-assessment and focuses on the technical configuration of endpoints, services and network boundaries.
It creates practical work: defining scope, locating assets, patching and secure configuration, and assembling evidence for verification. Armstrong can assist with selecting and configuring products and preparing controls, but does not perform the formal assessment.
Access and security controls for CyberEssentials Plus
Assesses whether access restrictions, privileged account controls, authentication and authorisation meet CyberEssentials Plus standards.
Audit evidence for CyberEssentials Plus
Collection of records, logs and reports that show CyberEssentials Plus controls are in place and that support audit enquiries.
CyberEssentials Plus — data protection and handling
Specifies classification, protection, transfer and retention requirements for organisational data under CyberEssentials Plus.
Where CyberEssentials Plus fits
The standard links to identity, endpoint protection, patch management, network devices and cloud services. Its checks are practical and focus on authentication, configuration hygiene and basic boundary defences.
You should consider CyberEssentials Plus when setting asset inventory, change processes and supplier requirements. Armstrong often helps align product settings and control processes to meet the required checks without operating customer environments.