AVARi

Avari Identity - Cyberessentials + Services

​

​

Cyber Essentials + involves an external vulnerability scan. This means that one of our certification bodies will test that is in line with the Cyber Essentials test specification.

 

When you need Cyber Essentials Basic and Cyber Essentials Plus

 

This depends on your motivations for seeking out certification in the first place: are you looking to show your customers that you take data protection seriously? Are you looking for certification because it is required to meet a contract/supply chain criteria? another reason?

When bidding on a contract/procurement/tender

​

Procurement tenders, especially if they are involved with the public sector, will ask for Cyber Essentials as a minimum. If they haven’t specified which level of Cyber Essentials, it usually means they only require the basic level.

When looking for your own internal reasons

​

If you want to demonstrate that your organisation is compliant with Cyber Security and takes data protection seriously - then Cyber Essentials PLUS is the obvious choice. Companies that hold sensitive data should always seek out PLUS certification, especially if they are involved in sectors that are frequent subjects of Cyber Attacks. However, this is not always cost efficient for SMEs and for some companies, the basic certification is sufficient. 

​

If you have ISO 27001 certification, do you still need Cyber Essentials/Cyber Essentials PLUS?

​

Yes, and no – it depends. If a client has requested your organisation to be Cyber Essentials certified, a 27001 certification will not satisfy this request. 27001 is a more comprehensive certification, whereas Cyber Essentials ensures that the core elements of your security are up to National Cyber Security Centre (NCSC) standards. Again, this would depend on your motivations; certification in 27001 does not guarantee compliance in Cyber Essentials.

 

How the pricing works for both levels

 

At Avari Identity, Cyber Essentials basic is a flat fee of £300+VAT. You may be eligible for a discount if you’re a charity, a member of a chamber of commerce or if you have recently attended one of our events.

Cyber Essentials PLUS quotations are based on the amount of days it will take an assessor to test your systems. This is quoted on an adhoc basis and can vary depending on factors such as:

• Number of employees

• Number & configuration of work stations

• Number of offices

• Complexity of network
   

 

At the end of the day…

 

The choice is up to you. With Avari Identity you can start a basic application (and upgrade later if you want), a PLUS only application (providing you already hold a valid Cyber Essentials certificate) or do both levels at the same time.