NCSC Cyber Advisor
Cyber Advisor is the National Cyber Security Centre’s (NCSC) Industry Assurance scheme delivered in partnership with IASME. It provides small and medium sized organisations with reliable and cost-effective cyber security advice and practical support.
Cyber Advisor is a targeted consultancy scheme aimed primarily at small organisations. Such organisations often lack in-house expertise or easy access to qualified people who can help them to secure their networks
Cyber Advisors initially focus on helping organisations to implement the five Cyber Essentials Technical Controls. This service will be known as Cyber Advisor (Cyber Essentials).
The NCSC believes the Cyber Essentials technical controls mitigate the majority of high volume, low-skill attacks perpetrated through the internet, including ransomware attacks.
We define the scope of the work based on the size of your IT infrastructure used to carry out your organisation’s business. We will normally estimate a number of days that it will take to review the infrastructure and provide you advice on how to achieve the five technical controls.
Cyber Essentials Cyber Advisor
Cyber Advisor Process
Scope
We develop an understanding of the Information Technology infrastructure used to carry out your organisation’s business and develop an asset register. If necessary this can take the form of a time limited discovery exercise to scan all your assets.
Gap Analyis
We work with all stakeholders to identify discrepancies between your organization's current security posture and the Cyber Essentials Standard.
Report
We develop a report on status of your organisation’s Cyber Essentials controls i.e. detailing the requirements that are met and those that are not; describing why controls are not met and the risks the organisation is exposed to; recommended actions to take Working with the business to agree remediation activities
Implementation
We can plan remediation activities that align to the risk and business. We have number of cost effective solutions and can work with the tools you already own. We can implement controls – or guide technical teams to do so – sympathetically to operational activities
What is in Scope