turtledovecyber
Certify to Cyber Essentials and Cyber Essentials Plus with Turtledove Cyber, and see why we've received 100% positive feedback for our approach to managing certification
Cyber Essentials is a UK government-backed certification scheme focused on five technical controls: firewalls, secure configuration, security update management, user access control and malware protection. Together, these address common ways attackers gain access to an organisation’s systems.
Certification gives customers and suppliers a clearer picture of your baseline security. It can also help meet procurement requirements where Cyber Essentials is specified. Turtledove is an IASME certification body for Cyber Essentials and Cyber Essentials Plus, with practical advice grounded in the systems your organisation actually uses.
Turtledove was an amazing support and expertly guided us the the Cyber Essential Plus certification. Always available for questions and guidance. Made the whole process painless and collaborative
What a great experience! The pain free experience of working with Turtledove to obtain cyber essentials plus is something everybody should experience.
My assessor demonstrated excellent knowledge of the CE+ framework and provided helpful, constructive feedback throughout. Their professional yet supportive approach made the assessment process smooth and relatively pain-free. Thank you for the guidance which helped us prepare to successfully pass.
Both certifications assess the same five technical controls. The difference is how their implementation is verified.
A verified self-assessment reviewed by an assessor. It demonstrates that your organisation meets the scheme’s technical requirements.
A recognised baseline for customer assurance and contracts that specify Cyber Essentials.
Adds hands-on technical checks to verify the controls on systems in scope. Cyber Essentials certification is the foundation.
For organisations whose customers require technical verification or that want greater assurance in their implementation.
Firewalls limit which connections can reach your systems. Block unsolicited incoming traffic, document approved exceptions and remove rules you no longer need. Devices used on networks you do not control need their own software firewall.
Default settings can leave unnecessary doors open. Remove unused accounts and software, change default passwords and disable unauthorised auto-run. Require authentication to access business data and protect devices with appropriate locking controls.
Keep software licensed, supported and up to date, with automatic updates enabled where possible. Apply fixes within 14 days of release for vulnerabilities rated high or critical, those scoring 7 or above on CVSS v3, and updates where the vendor provides no severity details.
Track update and vulnerability management easily and affordably using Turtledove Cyber's NEST PlatformGive each person only the access their role needs. Use separate accounts for administration and remove redundant accounts and privileges. Enable multi-factor authentication wherever available; cloud services must use MFA.
Stop malicious software from running with protection suited to each device: anti-malware on Windows and macOS, or application allow listing that permits only approved, signed software. Keep the protection active and current.
The five control areas are the same. Plus adds technical testing to the verified self-assessment, giving greater assurance that the controls have been implemented.
Yes. Cyber Essentials is designed for organisations of different sizes. The relevant devices, users and cloud services still need to be included in the assessment scope.
Certification records an assessment at a particular time. Updates, access management and vulnerability management remain part of looking after your systems throughout the year.
Explore the Cyber Essentials scheme at IASME (opens in a new tab)