The UK’s National Cyber Security Center (NCSC) has revealed that the first iteration of its new SME advisory scheme will focus on driving adoption of its best practice Cyber Essentials programme.
The GCHQ Agency said more than 20 certified providers are ready to offer Cyber Advisor services to small businesses that need help strengthening their baseline security posture.
The first group of advisors will guide clients through five Cyber Essentials Technical Controls best practices such as using firewalls, keeping software and devices up to date, choosing secure settings, and controlling access to data and services. We will focus on helping you implement.
Learn more about Cyber Advisor: NCSC Tests Cyber Advisor Program.
“We believe Cyber Essentials Technical Controls will mitigate the majority of large-scale, low-skilled attacks conducted over the Internet,” said Catherine H., head of NCSC’s Secure Professional Schemes.
“So one of the easiest ways to make the UK safer is to help organizations implement large-scale technical controls across the UK.”
However, in the future, NCSC plans to launch another Cyber Advisor iteration focused on other best practices.
“Smaller organizations often lack in-house expertise or do not have easy access to qualified personnel to help secure their networks. Often they have limited time and money to invest in security. It can be difficult for smaller organizations such as businesses, schools, and charities to know where to focus their resources,” continues Catherine H.
“This is where Cyber Advisor can help.”
NCSC hopes that hundreds more companies will join the certification scheme and offer their own Cyber Advisor consulting services. Those serving geographically remote or underrepresented areas will be especially welcomed by the agency.
Also this week, NCSC provided an update on a long-term project aimed at providing IT buyers with more information and assurance about products on the market.
Its principles-based assurance framework helps individuals and organizations make more accurate, risk-based assessments based on large-scale, independent testing of their products.
