Cyber Essentials Plus Achieved: How Frost Guided a Client Through Every Phase

The Frost team have been working closely with a client to meet Cyber Essentials Plus compliance.

This project was delivered in several phases and involved extensive project planning, a review of existing IT and security processes, a server upgrade and purchase, and a day spent at the client’s site during the assessment.

This helped to ensure all elements highlighted under the preparation checklist (see below) were successfully completed.

Preparation Checklist

1.       Full inventory of all in-scope devices supplied to the assessor

2.      All network information was made available to the assessor before the assessment started

3.      Qualys Cloud Agent installed on all devices and the report checked for vulnerabilities

4.      Security updates applied, ensuring all devices run on supported operating systems, with patches and remediations

5.      Mobile device evidence provided

6.      User availability confirmed - selected users, administrators and IT contacts needed to be available during assessment.

Phase 2 also involved purchasing a new client-server and handing it over to the ERP solutions partner for testing and user acceptance.

Nick Sims comments: “We are delighted to support our client in achieving their goal of Cyber Essentials Plus certification. The project planning and execution covered all aspects of their IT systems and infrastructure, and required close collaboration with our client”.