To achieve Cyber Essentials certification, you must complete the Cyber Essentials SAQ (self-assessment questionnaire).
The SAQ questions relate to each of the five Cyber Essentials security controls:
- Secure configuration
- User access controls
- Security update management
- Malware protection
From 24th January 2022, the SAQ has been expanded to include home working, the use of BYOD and cloud services.
Applicants must confirm they’ve read the updated Requirements for IT infrastructure document as part of their application. Your completed SAQ serves as a statement of your organisation’s compliance, demonstrating that you have met the scheme’s requirements. It must be signed off by a member of your organisation’s board or equivalent.