FAQs
In here you’ll find our frequently asked questions. If you don’t find your answer please contact us.
Cyber security solutions are not a one size fits all. Businesses need a layered approach to defence, monitoring and remediation.
Cyber security doesn’t have to be as difficult to manage and understand as most organisations think; we will guide you through best practices and solutions that will leave you better equipped to deal with the threats to your organisation.
We unfortunately live in a time where all businesses, regardless of size or industry sector are at risk, whether directly or indirectly.
Whilst larger organisations are more likely to have technology, expertise, and processes in place to protect themselves against cyber-attacks, this isn’t always the case. Smaller businesses are less likely to have the necessary resources and so may find themselves at greater risk of attack from hackers.
Without the proper protections in place, this can increase the risk of attack as it opens up a number of factors and vulnerabilities. Employees may be working on unsecured networks or in locations such as coffee shops.
Every business it at risk of a cyber-attack. Cyber criminals will regularly send out completely random attacks such as a phishing email for example, all it takes is one click and your business may be at risk from compromise.
ISO 27001 is an internationally recognised standard that when implemented correctly provides assurance of your commitment to protect your business information.
ISO 27001 can be implemented into organisations of any size, ranging from micro businesses to global enterprises. The standard is flexible to allow for the controls to be applied in a way that is relevant to you.
How long it takes to achieve ISO 27001 certification very much depends on factors such as the complexity of processes, and how quickly you want to achieve certification. We have carried out implementations from anywhere between 3 months to 2 years.
By having Cyber Essentials certification, you will be more protected against the most common security threats. It helps build trust with customers by demonstrating that cyber security is important in your organisation. All certified organisations are listed on the NCSC’s certification database. It also strengthens your supply chain. Finally, having Cyber Essentials will also allow you the opportunity to bid for UK Government and MOD tenders.
Cyber Essentials is a verified self-assessment certification that demonstrates an organisation has the required cyber security controls in place. Cyber Essentials plus is based on the same technical requirements as Cyber Essentials, but it also includes a technical audit of your IT systems, to verify the controls are in place. This gives a higher level of assurance that an organisation has correctly implemented the controls
Shift Key Cyber are an Assured Service Provider for NCSC. The Cyber Advisors (Cyber Essentials) scheme is specifically aimed to help UK small and medium organisations by offering reliable and cost-effective cyber security advice, and where required, practical hands-on support to help guide businesses through the Cyber Essentials process and certification.
Cyber Essentials follows a tiered pricing structure depending on the size of your business. It is a verified self-assessment process which follows the pricing structure shown in the table below.
| Business Size | Cost |
|---|---|
|
Micro organisations (0-9 Employees) |
£320 + VAT |
|
Small organisations (10-49 Employees) |
£440 + VAT |
|
Medium Organisations (50-249 Employees) |
£500 + VAT |
| Large Organisations (250+ Employees) | £600 + VAT |
This depends on the size and complexity of your network. Please contact us for advice and further information and a quote.
