Cyber Essentials: 1 Day Assessment

ADM Computing take an audit & recommendation / remediation / certification three-phase approach to Cyber Essentials. This approach considers the requirements for completion of the official questionnaire (undertaken by ADM, assessed by the Certification Body). Our approach can be summarised as follows:

Cyber Essentials self-assessment questionnaire:

Phase one - Audit & Secure Score Evaluation

• Pre-audit conference call
• Onsite audit
• Remote collation of audit data
• Compilation of questionnaire and remediation report

Phase one - Recommendation - reports will be provided that include:

• Summary of all actions that are needed to attain compliance
• Supplementary reports covering IT estate, such as user accounts, registered devices, admin users, deployed software (and versions)
• Separate report detailing Secure Score Evaluation and recommendations.

Phase two – Remediation

• Advice on remediation requirements where needed
• Remediation works undertaken by candidate organisation or other third party
• ADM can give additional resource to assist with remediation if required (at additional cost dependent on requirements)

Phase three – CE Certification

• ADM to review remediation actions and complete questionnaire with updated evidence
• Sign-off of questionnaire by candidate organisation and submission to certification body by ADM

Annual renewal (CE only) An annual renewal is required, ADM can discuss the requirements for this once the initial certificate is awarded.

Additional notes

• ADM will require full access to the servers and infrastructure of the candidate organisation.
• The candidate organisation will need to supply copy of IT policies including user management and system change management (exact requirements will be discussed during the audit)
• ADM will require access to your Microsoft 365 tenant for the purpose of producing the Microsoft Secure Score Evaluation.