Please note that an "IT Health Check" is not the same as a "CHECK Penetration Test".
If a CHECK test is required, please select the appropriate type of test and we'll ask about NCSC approval requirements at the end.
The more accurate the details we receive, the more precise the finished quote will be.
Cyber Essentials audits are now delivered under a scheme operated by IASME. There are two levels of audit, Cyber Essentials BASIC which involves the client completing a self-assessment questionnaire - once completed SureCloud will mark this and issue a pass or fail. Cyber Essentials PLUS involves Cyber Essentials BASIC and an additional internal audit which is made up of a vulnerability scan of the sample devices, internet browser & inbound email payload testing and a review of the sample mobile devices. The last stage of Cyber Essentials PLUS is an external vulnerability scan against your perimeter network assets.
IASME are very strict in relation to the use of unsupported operating systems on end-user devices, servers and mobile devices. In order to pass the Cyber Essentials Basic audit you must not have any unsupported operating systems, unless they are covered by an extended support agreement or can turn inbound and outbound internet access off on the effected devices.
This information is required as a pre-requisite for Cyber Essentials Scoping.
Although you have specified that you do have unsupported operating systems scoping can continue, failure to remove unsupported operating systems during the remediation phase could impact your ability to obtain Cyber Essentials certification.
Please detail the primary contact details for the organisation, this information will be used to configure the IASME Portal account.
This information is a requirement for passing Cyber Essentials Basic and will have to be provided during the IASME Cyber Essentials Basic Self-Assessment questionnaire
Please provide a high level description of each in-scope application.
Can we perform the testing remotely, or do we need to visit on-site to test the application?
Please provide a high level description of each in-scope API.
Snippet from NCSC Website
CHECK is the term for the NCSC approved penetration test companies and the methodology used to conduct a penetration test. Companies providing CHECK services do so using staff who hold NCSC approved qualifications and have suitable experience. Penetration tests are conducted using NCSC recognised methods and the subsequent report and recommendations are produced to a recognised standard.
Please kindly include any additional context around the usage, implementation or overall environment that may be useful in the scoping of the engagement.
Please also let us know if you have any special requirements for reporting, such as an "Attestation of Penetration Testing".
Enter the destination URL
Or link to existing content