Cyber Essentials
Cyber Essentials is the UK government-backed scheme for basic cyber hygiene. It covers five technical controls: firewalls, secure configuration, user access control, malware protection, and security update management.
UK Cyber Essentials
What you get with Cyber Essentials.
- Cyber Essentials available as a prebuilt framework
- 37 requirements tracked with status and evidence
- Policies and tasks managed in the same platform
Running Cyber Essentials in Varman
UK Cyber Essentials is available in Varman as a prebuilt framework. The numbers below are what it contains in the product today. You add it to your workspace and work through it in the same place as your policies, risks, vendors, and evidence.
- 37
- requirements
- 21
- controls mapped
- 18
- evidence tasks
- 20
- policy templates
1. Add the framework
Each Cyber Essentials requirement appears with its status, so you can see what is met and what is still open.
2. Connect your systems
Integrations run scheduled checks against your cloud, identity, and developer tools and record the results as evidence. See the integrations.
3. Close the gaps
Policies, tasks, and uploaded evidence cover what cannot be checked automatically. Readiness for Cyber Essentials updates as each item is completed.
4. Work with your auditor
Varman organizes the evidence. Any audit, assessment, or certification is carried out by an independent third party, not by Varman.
Cyber Essentials questions, answered.
What does Cyber Essentials cover?
Five technical controls: firewalls, secure configuration, user access control, malware protection, and security update management. Together they protect against the most common internet-based attacks.
What is the difference between Cyber Essentials and Cyber Essentials Plus?
Cyber Essentials is a self-assessment questionnaire reviewed by a certification body. Cyber Essentials Plus has the same requirements and adds hands-on technical verification of your systems by an assessor.
Who issues Cyber Essentials certificates?
IASME is the Cyber Essentials partner of the UK National Cyber Security Centre and runs the scheme through a network of licensed certification bodies. Certification is renewed every 12 months.
How does Varman help with Cyber Essentials?
Varman ships Cyber Essentials as a prebuilt framework with 37 requirements, 21 mapped controls, 18 evidence tasks, and 20 policy templates. Integrations collect evidence automatically, and any audit or certification is done by an independent third party.