Written policies to support your Cyber Essentials journey
Customers, tenders and insurers increasingly ask UK suppliers about Cyber Essentials. Get the written IT security policies that sit behind the five technical controls, tailored to your business and ready in about 10 minutes.
Pro maps every policy to Cyber Essentials, ISO 27001, NIST CSF 2.0 and CIS Controls.
The five Cyber Essentials controls, and where your pack covers them
Cyber Essentials is the UK government-backed scheme, run by the NCSC with IASME, that checks your business has basic technical protections against the most common attacks. Your Information Security Policy sets the overall rules; these policies cover each control.
| Cyber Essentials control | In your pack |
|---|---|
| Firewalls | Remote Working Policy: home and public Wi-Fi, VPN use and protecting devices on untrusted networks |
| Secure configuration | Acceptable Use and Bring Your Own Device policies: approved devices, screen locks, removing unused software and accounts |
| User access control | Password and MFA Policy, and Access Control Policy: joiners, movers and leavers, admin rights and an access register |
| Malware protection | Software and Patch Management Policy (anti-malware) and Email and Phishing Policy |
| Security update management | Software and Patch Management Policy: critical updates applied within 14 days |
PolicyPack helps you prepare for Cyber Essentials. It does not certify you. Certification is assessed by an IASME-licensed certification body, which checks that your firewalls, device settings, accounts, malware protection and updates actually meet the requirements. Your policies document how you meet them and help you keep them in place.
Written for UK businesses
Choose the UK and your pack references UK GDPR, the ICO, the NCSC and Report Fraud throughout.
Framework mapping
Pro shows which Cyber Essentials, ISO 27001, NIST CSF 2.0 and CIS control each of your policies supports.
Asset register included
List every device, online service and router with its operating system, encryption and support date: the inventory a Cyber Essentials assessment starts from.
Get your policies in place before your assessment
12 tailored policies, a business continuity plan and a compliance kit, ready in minutes. From €149, one-off.