Cyber Essentials
45
MENTIONS
17
EPISODES
16
PODCASTS
Search complete. 45 mentions across 17 episodes found for "Cyber Essentials".
Nov 13, 2026
Stuart MacDonaldGUEST
And reciprocity was never a bad thing.
Stuart ClarkHOST
And what's step one for businesses that maybe are worried about this? Is it going down the cyber essentials route or is that just a kind of big box? Well, you've got all the chat, you've got all
Stuart MacDonaldGUEST
the chat.
Stuart MacDonaldGUEST
So cyber essentials is definitely a starting point.
Stuart MacDonaldGUEST
So first rung in the ladder, cyber essentials.
Stuart MacDonaldGUEST
Next rung, cyber essentials plus.
Stuart MacDonaldGUEST
And then you can, there's lots of things that sit between that, so there's lots of different frameworks.
Stuart MacDonaldGUEST
I was involved in a piece of work for MHCLG Ministry for Housing, Communities and Local Government.
Toby HarrisGUEST
In the cyber field, people recognise that there is good cyber housekeeping that you can take.
Toby HarrisGUEST
Cyber essentials, cyber essentials plus.
Toby HarrisGUEST
They're not going to prevent you if a nation state is out to get you.
Toby HarrisGUEST
But they are sensible things for any organisation, any individual to start to think about.
Robbie TyrieGUEST
What I usually find is that's when a product's due for release, one of their clients is asking specific questions for evidence.
Robbie TyrieGUEST
They'd like to be certified on Cyber Essentials, ISO 27001, SOC 2, something like that.
Robbie TyrieGUEST
They want a badge to make them look more respectable.
Robbie TyrieGUEST
They've had a cyber event.
5 MINS LATER
Robbie TyrieGUEST
So they're a very small engineering firm.
Robbie TyrieGUEST
They've got about 20 employees across two sites.
Robbie TyrieGUEST
And they asked me to do Cyber Essentials because they outsource all their IT to a third party.
Robbie TyrieGUEST
And they were having concerns about, well, did they really understand security? So they brought me in.
Doug DaveyHOST
So the standard sorts of things, you know, you'd want to have MFA on all your accounts as baseline.
Doug DaveyHOST
And that goes for not just Microsoft, but really any application these days, you should have MFA on it, especially if you're going through Cyber Essentials with the new question set, because it basically mandates that you have MFA on everything.
Doug DaveyHOST
So security like that, for access to your data, we'd always recommend having Microsoft Intune.
Doug DaveyHOST
So Intune ensures that when you're accessing business data, you can only do it from a device which you know about and is compliant and up to date and secure and things, and that stops people either using random home devices or malicious actors using devices that you don't know about.
James MortlockGUEST
And it takes time to understand the technology, understand the decisions, what they're accountable for, to understand their sort of requirements under GDPR to be regulatory compliant.
James MortlockGUEST
You know, we've got cyber essentials for cyber security.
James MortlockGUEST
We do not have the equivalent of AI essentials for small organizations that are rolling out.
James MortlockGUEST
And that's a tiny gap that I offer as one of my services.
James MortlockGUEST
So I ended up being forced to, if that makes sense.
Tim FlaggHOST
Yeah, I think there has been some talk about that.
Tim FlaggHOST
And I think the point was made and the analogy there between the fact that there are those cyber essentials, but not for AI as well.
Tim FlaggHOST
But I mean, maybe that's something we pick up offline.
Noel BradfordHOST
reason MFA matters more this year.
Noel BradfordHOST
Under the cyber essentials rules that came in this April, MFA is mandatory on every cloud service where it's available.
Noel BradfordHOST
Missing it's an automatic fail, and it doesn't matter whether the service is free or paid.
Noel BradfordHOST
And for the record, any software supplier that charges extra for MFA should be named and shamed.
Lucy HarperPANELIST
Question
Noel BradfordHOST
four.
Noel BradfordHOST
Do you hold cyber essentials plus?
Lucy HarperPANELIST
And what's the difference between that and plain cyber essentials?
John HowellGUEST
But in order to deal with bigger organisations and win bigger contracts and be seen as reputable, you have to have certain accreditations.
John HowellGUEST
So UK-specific, Cyber Essentials Plus is kind of one of the benchmarks.
John HowellGUEST
You've got ISO 27001.
John HowellGUEST
That doesn't necessarily mean that you have to buy products as such, but you have to have a lot of controls.
John HowellGUEST
But we still had an awful lot of checks in place because.
John HowellGUEST
Not only did we have digital data that we had to look after, there's physical things that we had to protect and that brings a whole level of other controls with it.
John HowellGUEST
And again, going through these processes like ISO and Cyber Essentials Plus, or if you have a penetration test, you'll be tested obviously on your cyber thing and that's what everyone thinks of.
John HowellGUEST
But what about, yeah, your physical security? Can someone just tailgate you into the building and get into anywhere they want to? Or, you know, what's a bit more fashionable now, I suppose, is like social engineering, where you just pick up the phone, call one of the end users.
Rob SpenceHOST
And as part of that proposal, I needed a cyber essential certificate.
Rob SpenceHOST
And now because of the deadline of the proposal, I had no chance to excuse me, I had no chance of getting the cyber essentials certificate before the time that that proposal needed to be in.
Rob SpenceHOST
However, I know some really good people in the cyber essential space and really good people in the cybersecurity space.
Rob SpenceHOST
So I called them up.
Rob SpenceHOST
There is no point whatsoever in marketing.
Rob SpenceHOST
There is no point in attending networking events.
Rob SpenceHOST
If we look at the cyber essentials and the cybersecurity story, these people pay approximately 20 pound per month to attend this networking event.
Rob SpenceHOST
Again, this is a networking event that I also attend and I sit next to them and I talk to them.
Lisa HughesHOST
I
Jamie AndersonGUEST
mean, there's all of the cyber essentials, for example.
Jamie AndersonGUEST
That's the security safety bit.
Jamie AndersonGUEST
That is absolutely there.
Simon PillingerHOST
And there was no investigation down that avenue that was published, which I think is, if I were a cynic, I would say, well, that fits entirely with John Edwards' approach of not looking into public bodies.
Tash WhittakerHOST
But Cyber Essentials now requires you that if MFA is available, you have to use it, even if it means you have to pay more.
Simon PillingerHOST
And DSPT required it at the time, right? This is not a new thing, but yet Trust didn't have it in place.
Simon PillingerHOST
What
7 more episodes mention Cyber Essentials.
Create an account to see the whole feed, search across every transcript, and follow the entities you care about.