Cybercrime doesn't discriminate by business size. In fact, small and medium businesses across Derbyshire are increasingly targeted because attackers assume their defences are weaker than large enterprises. That's where Cyber Essentials comes in — a government-backed certification that proves your business takes cybersecurity seriously.
What Is Cyber Essentials?
Cyber Essentials is a UK government scheme designed to help organisations protect themselves against the most common cyber threats. Launched in 2014 by the National Cyber Security Centre (NCSC), it focuses on five key technical controls that block the vast majority of opportunistic attacks.
There are two levels of certification:
- Cyber Essentials — A self-assessment questionnaire verified by an external assessor.
- Cyber Essentials Plus — Includes the same questionnaire plus an independent technical audit of your systems, including vulnerability scans.
The Five Controls Explained
1. Firewalls
Your internet connection is a doorway into your network. A properly configured firewall ensures only safe traffic enters, blocking malicious connection attempts before they reach your devices.
2. Secure Configuration
Every device and system you use comes with default settings — and many of those defaults prioritise convenience over security. Secure configuration means removing unnecessary accounts, disabling unused features, and applying security settings that reduce your attack surface.
3. User Access Control
Not every employee needs access to every file and system. Implementing the principle of least privilege — giving users only the access they absolutely need — limits the damage if an account is compromised.
4. Malware Protection
Whether you use traditional antivirus or modern endpoint detection and response (EDR), you need active protection against viruses, ransomware, spyware, and other malicious software. And it must be kept up to date.
5. Patch Management
Software vulnerabilities are discovered daily. Cyber Essentials requires you to install security patches within 14 days of release — closing the windows attackers exploit.
Why Certification Matters for Derbyshire Businesses
Beyond the obvious security benefits, Cyber Essentials certification opens doors. Many public sector contracts now require it as a minimum. It can reduce your cyber insurance premiums. And it sends a clear message to customers and partners: you take their data seriously.
"Since achieving Cyber Essentials Plus, we've noticed a marked increase in confidence from our clients. It's become a competitive advantage." — Manufacturing Client, Worksop
Common Mistakes We See
Having guided dozens of Derbyshire businesses through certification, we've seen the same stumbling blocks repeatedly:
- Assuming a basic firewall from your ISP is sufficient
- Letting staff use personal devices without endpoint protection
- Delaying patches because "nothing bad has happened yet"
- Sharing administrator passwords across multiple users
- Underestimating how long the preparation phase takes
How Liberty ICT Can Help
We don't just tick boxes. We implement the five controls properly, integrate them with your existing infrastructure, and ensure they remain effective long after certification. Our Cyber Essentials preparation service includes gap analysis, remediation, policy documentation, and liaison with your chosen certification body.
Ready to Get Certified?
Contact us for a free Cyber Essentials readiness assessment. We'll identify your gaps and create a plan to get you certified.
Request Free Assessment