Embedded Files
Compliance with Information Security standards
Compliance with Information Security standards
ServerBright provides expertise across two security standards: Cyber Essentials and ISO27001. Between them, these standards support virtually all businesses' information security requirements.
But there are differences between the two, which will determine the better fit for your business.
Cyber Essentials / CE+
Cyber Essentials / CE+
Cyber Essentials is the entry point for UK organisations to demonstrably achieve cyber resilience.
Sponsored by the National Cyber Security Centre (NCSC), the civil arm of GCHQ (the UK's communications intelligence body), Cyber Essentials provides a framework within which SMEs can validate their operations against technical "controls". Achieving Cyber Essentials is a matter of proving that the organisation adheres to those controls, and has working practices that underpin this.
The official Cyber Essentials logo (for demonstration purposes)
ISO27001
ISO27001
Where Cyber Essentials provides a prescribed framework for compliance, ISO27001 is the globally-recognised information security standard that is more open to the types of control that your organisation uses. However, the principle of demonstrating compliance with those controls is still the same.
The quality and appropriateness of an organisation's implementation of ISO27001 is therefore determined, to a great extent, on the nature of the controls it sets in place for itself. But this is also where ISO27001 can shine, as those controls can be more specific to the actual working practices of an organisation, and therefore more tightly enforceable.
The official ISO 27001 logo (for demonstration purposes)
Nothing says you take information security more seriously,
than earning the badge that proves it.
Objectivity
Objectivity
ServerBright takes your information security very seriously. We work with key partners to maintain best-practice approaches to the controls, documentation, workflow and audit preparation necessary.
Objectivity is essential when managing information security, from initial assessment through to incident management and root cause analysis. We actively work towards a blame-free culture, and encourage that in all engagements. Process, not people, is the primary cause of failure.
Demonstrable information security is a commitment your customers will appreciate.
Page updated
Report abuse