A UK cyber assurance standard aimed at small and medium organisations. It covers much of the same ground as ISO 27001, including risk management, asset management and incident response, at a scale and cost that suits an organisation without a dedicated security function.
The difference is how the answers are checked, not what is asked. Both use the same standard.
A verified self-assessment against the IASME Cyber Assurance standard. You answer the question set and the answers are reviewed by a certification body.
An on-site or remote audit by an IASME-appointed assessor, who tests the controls rather than accepting the self-assessment at face value.
Identifying what matters to the organisation and deciding what to do about it, documented rather than held informally.
Knowing what hardware, software and data exist, where they are and who is accountable for them.
Who can reach what, how that is granted and removed, and how privileged accounts are handled.
Awareness, responsibilities and the security expectations placed on staff.
How data is backed up, how restoration is tested, and how the organisation keeps operating through disruption.
Detecting an incident, responding to it, and learning from it afterwards.
Tell us where you are and what is driving the requirement. We will tell you which level fits and what it will take to get there.
Talk to usBefore you talk to anyone