Certification body for Cyber Essentials Plus & IASME

Cyber Essentials is a government backed, industry supported scheme to help organisations of all sizes protect themselves against the most common cyberattacks. The Cyber Essentials scheme focuses on a set of five key security controls which, when implemented correctly, will mitigate against the most common cyber threats, particularly those requiring low levels of attacker skill and which are widely available online.

Achieving Cyber Essentials certification provides organisations with a baseline of security controls upon which to build a robust defence in the modern day threat landscape.

As a Cyber Essentials Certification Body, we are trained and licenced to assess and certify against all levels of the Government’s Cyber Essentials scheme and provide the necessary guidance and assistance to organisations aiming to achieve certification.

CyberGuarded are an Certification body for Cyber Essentials Plus & IASME Governance as per the link below. https://www.iasme.co.uk/certification-bodies/

Carrying out monthly internal, external or cloud vulnerability assessments, effectively placing a seasoned pentester within your organisation month on month. Can be securely deployed using several methodologies to suit each organisation’s requirements.

Malicious actors are constantly finding new ways to compromise business networks. Evolving methods favoured by adversaries are increasingly attacking improperly secured commonly used mobile devices such as, tablets and smart phones.

These mobile devices most often have access to corporate networks via email, VPNs, and other remote access methods.

CyberGuarded assists organisations protect against the latest mobile security threats. We assess and attempt to penetrate mobile networks and devices using the latest threat methods which when combined with our approach to identifying security vulnerabilities ensures that latest security compromising methods are presented for mitigation.

In a social engineering test, we identify an organisation’s user base and, if required, third party suppliers using various methods including the collection of public information freely available from the Internet. Using this publicly available data, we attempt to garner sensitive information about a target within the organisation, including methods such as direct in-person contact, telephone calls and emails, to interact with the organisations user base.

Alternatively, we generate spear phishing campaigns to target a specific user/email address or range of users/addresses either researched from the Internet or provided by the organisation. In this type of targeted attack, a payload is delivered via email or the Internet which has the potential to compromise the host or network when executed. An organisation’s agreement on the exact scope and scale of a social engineering exercise is required and only benign, proof-of-concept payloads are used.