We are delighted to share that the University has successfully renewed both its Cyber Essentials and Cyber Essentials Plus accreditations for another twelve months. Thank you to everyone who helped, particularly those who gave up time for device audits and responded to requests throughout the process.
What is Cyber Essentials?
Cyber Essentials is a UK government-backed scheme designed to help organisations protect themselves against the most common cyber threats. It sets a clear baseline of security controls, covering areas like firewalls, access management, software updates, and malware protection and requires independent assessment to verify those controls are in place.
Cyber Essentials Plus goes a step further, adding hands-on technical verification. Rather than relying solely on self-assessment, an independent assessor tests our systems directly. It’s a more rigorous standard and achieving both within a few weeks of each other reflects the groundwork that’s been laid over the past year in terms of consistency and control across our environment.
What does this mean for you day-to-day?
In all honesty, not much and that’s the point. No changes to how you work, no new requirements on your end. The accreditation reflects controls and standards that are already in place. The main practical benefit is for colleagues involved in grant applications or procurement: you can continue to confirm that the University holds Cyber Essentials Plus certification, which is increasingly being asked for as a baseline requirement.
Looking Ahead: The Cyber Security and Resilience Bill
It’s worth keeping an eye on the Cyber Security and Resilience Bill, which is expected to progress through Parliament in the coming year. While the detail is still being worked through, the direction of travel is clear: regulatory expectations around cyber security in sectors like Higher Education are likely to increase. Having Cyber Essentials Plus already embedded as an annual practice puts us in a strong position as that landscape evolves.
Holding this accreditation isn’t just about passing a test once a year. It reflects an ongoing commitment to making sure our environment is as resilient as it can be.
Thanks again to everyone involved.