> ## Documentation Index
> Fetch the complete documentation index at: https://help.dsalta.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Cyber Essentials

> Achieve the UK government-backed baseline for cyber hygiene.

> Achieve the UK government-backed baseline for cyber hygiene.

Cyber Essentials is a UK government-backed certification scheme that helps organizations protect against the most common cyber attacks. It focuses on five technical control areas and is based on a self-assessment questionnaire verified by a certification body.

<Note>
  Cyber Essentials is often required to bid for certain UK government contracts and demonstrates a baseline of cyber hygiene to customers.
</Note>

## Who needs Cyber Essentials?

<CardGroup cols={2}>
  <Card title="UK government suppliers" icon="flag">
    Often mandatory for contracts involving handling of certain government information.
  </Card>

  <Card title="SMEs" icon="building">
    An accessible, affordable starting point for small and medium organizations.
  </Card>
</CardGroup>

## Key components

<CardGroup cols={3}>
  <Card title="Firewalls" icon="shield-halved">
    Secure configuration of boundary and device firewalls.
  </Card>

  <Card title="Secure configuration" icon="gear">
    Harden devices and software by removing unnecessary functionality.
  </Card>

  <Card title="Access control" icon="key">
    Restrict access to data and services to authorized users.
  </Card>

  <Card title="Malware protection" icon="bug-slash">
    Protect against malware with anti-malware or allow-listing.
  </Card>

  <Card title="Security update management" icon="rotate">
    Keep software and devices patched and up to date.
  </Card>
</CardGroup>

## How DSALTA helps with Cyber Essentials

<Steps>
  <Step title="Activate Cyber Essentials">
    Select Cyber Essentials from the Frameworks page. DSALTA maps the five control areas.
  </Step>

  <Step title="Review the five controls">
    Review firewalls, configuration, access, malware, and patching controls.
  </Step>

  <Step title="Collect evidence automatically">
    Connect integrations to verify technical controls.
  </Step>

  <Step title="Complete the questionnaire">
    Answer the self-assessment with DSALTA's guidance.
  </Step>

  <Step title="Submit for certification">
    Prepare your verified self-assessment for the certification body.
  </Step>
</Steps>

## Frequently asked questions

<AccordionGroup>
  <Accordion title="What is the difference between Cyber Essentials and Plus?" icon="code-compare">
    Cyber Essentials is a verified self-assessment. Cyber Essentials Plus adds a hands-on technical audit by an assessor.
  </Accordion>

  <Accordion title="How long does certification last?" icon="calendar">
    Certification is valid for 12 months and must be renewed annually.
  </Accordion>
</AccordionGroup>

## Related pages

* [Active Frameworks](/guides/compliance/frameworks-active)
* [Available Frameworks](/guides/compliance/frameworks-available)
* [Controls](/guides/compliance/controls)
* [Audits](/guides/compliance/audits)