This site uses cookies - click here (opens in new tab)to learn more

 

Our Aims

 

Secure and protect your systems and data.

We don't just deal with technical aspects of Cyber Security. The strength of our approach is to help to bridge the knowledge gap that often exists between those in the technical, operational and administrative domains. The aims of Symonds-Security.Org.UK are to assist Small & Medium Sized Enterprises (SMEs) to implement all the technical and organisational controls required to prepare readiness with the requirements of the General Data Protection Regulation as well as help to obtain compliance with the UK Government endorsed Cyber Essentials certification scheme by providing consultancy in the form of information, advice, online tools and practical in-house support and training to enable the enterprise to achieve and retain Cyber Essentials certification. All backed by Disclosure Scotland checked expertise comprising of the highest industry accepted academic and professional qualifications, together with over 25 years experience supporting IT security within the whole spectrum of disciplines including military, government, health, private industry and non-governmental organisations worldwide.

Achieving certification via the Cyber Essentials scheme helps an organisation to provide a clear statement of the basic controls the organisation has implemented to mitigate the risk from common Internet based threats.

 

The Cyber Essentials Scheme

 

Cyber Essentials is a Government backed and industry supported scheme designed to assist businesses in protecting themselves against the ever growing threat of cyber-attacks. It provides a benchmark of security standards that are required to be met in order to achieve certification by the Cyber Essentials scheme, demonstrating to business partners, customers and regulators that the certified organisation meets those minimum standards and that it takes cyber security seriously.

The scheme provides these as a recognised national standard for SMEs who would otherwise be precluded from existing international standards such as ISO 27000 which is often perceived to be too complex, time-consuming, and expensive for smaller organisations to implement.

 

Drivers for Compliance

 

Central government procurement policy now specifies that Cyber Essentials certification is a mandatory requirement for all businesses that wish to bid for government and MOD contracts, and is set to become the de facto prerequisite for both public and private sector tenders in the future.

The HM Government National Cyber Security Strategy 2016-2020 (NCSS) endorses the Cyber Essentials standard by stating in their 2016 report:

"Properly implementing the Cyber Essentials scheme will protect against the vast majority of common internet threats."

 

In July 2016, The Department of Health, National Data Guardian (NDG) published  "Review of data security, consent and opt-outs" recommending:

"Data Security Standard 9: A strategy is in place for protecting IT systems from cyber threats which is based on a proven cyber security framework such as Cyber Essentials. This is reviewed at least annually."

 

The European General Data Protection Regulation comes into force May 2018, replacing the existing Data Protection Act (1998) with even more stringent regulations combined with far more punitive fines and penalties for successful breaches resulting from non-compliance. Despite Brexit it is unlikely that GDPR will be repealed and even if it is, the replacement is likely to be equally (if not more) stringent as a result of the NCSS 2016-2020 objective:

"By 2021, the UK will have strengthened its position as a world leader in cyber science and technology."

 

This objective cannot be achieved without security standards and regulations that at least match those of our worldwide trading partners.

 

Visit our Project Honeypot page to view the types and frequency of Cyber Attacks that occur regularly on any online system.

Learn More

 

Learn more about the Security Alliance and how we can help your enterprise move towards compliance with GDPR requirements, NCSS Standards and stay secure online, as well as moving towards achieving the Cyber Essentials accreditation. free seminar will be held on Friday 1st December 2017 (11:00 Hrs) at:

 

Charing Cross Centre

19 St John Maddermarket

Norwich

NR2 1DN

Click here for map.

 

Register your interest by emailing gsymonds@bcs.org.uk. Or call us on 07486 026710, or use our Contact Form.