Cyber Essentials Plus For Industrial Manufacturer

Cyber Essentials Plus Accreditation For Industrial Parts Manufacturer

We supported an industrial fabricator in becoming both Cyber Essentials and Cyber Essentials Plus accredited through consultancy, systems development and final assessment of both standard and Plus certifications.

Becoming Cyber Essentials Accredited

Cyber Essentials is a UK government-backed cyber security accreditation. Recognised as a standard for cyber security maturity in business, the company needed to become Cyber Essentials Plus accredited for a tender to supply marine parts.

Our cyber security consultant started by engaging with key stakeholders at the manufacturer to create a long-term project plan. We assessed their current IT infrastructure to make sure they met the requirements to pass the standard Cyber Essentials certification. These interactions were vital for our expert to understand their IT setup and current cyber security status.

Initial consultancy determined that key pieces of infrastructure required replacing for compliance and that mobile phone upgrades would be needed to pass the basic assessment.

With these measures completed, we were able to guide the manufacturer to becoming Cyber Essentials certified.

Becoming Cyber Essentials Plus Accredited

As the company required more advanced accreditation for supply, our consultant then promptly arranged a further time to engage around the Cyber Essentials Plus Certification.

Cyber Essentials Plus is a far more in-depth assessment. As such, we helped the company prepare by undertaking an initial vulnerability assessment spanning their seven offices and more than 30 devices six weeks ahead of the assessment date.

With the results of our scan, we were able to consult with the manufacturer on the required remediation measures. Various issues were identified, such as an email migration to a more secure Microsoft 365 cloud solution. This we coordinated and undertook with the help of our project team and engineers.

There was also the need to connect all their computers, laptops and mobile devices to Microsoft Azure AD to enhance security, as well as set up Microsoft Intune mobile device management on all devices to ensure security.

After mitigating these issues, a secondary vulnerability assessment was undertaken one week before the final assessment to check measures had been adopted successfully and ensure the best chances of becoming Cyber Essentials Plus accredited on the first attempt. This assessment was clear and gave the manufacturer peace of mind about becoming certified.

Cyber Essentials Plus was then undertaken and verified by an externally verified Cyber Essentials assessor. The company passed, and we were pleased to present them with their Cyber Essentials Plus accreditation, enabling them to work with the originally desired marine supplier.

As well as benefitting from enhanced security, the company now enjoys the benefits of their cyber security accreditation. In addition to supplying the desired marine parts supplier, the company can now tender for a wide range of business (including Government contracts) thanks to their Cyber Essentials Plus certification.

View more information about becoming Cyber Essentials or Cyber Essentials Plus accredited: Find Out More