NCSC announces major change to the Cyber Essentials scheme

Over the past five years, the Cyber Essentials scheme has been vital in helping protect organisations from some of the most common causes of data breaches.

However, the NCSC (National Cyber Security Centre) has announced a change to the way the scheme is run. From April 2020, the five Cyber Essentials certification bodies will be replaced by one, the IASME Consortium.

There will be a transition period, with the current scheme operating as normal until 31 March 2020.

After that date, new applications will be handled under the revised Cyber Essentials scheme through the IASME Consortium. Organisations still in the process of seeking certification will have until 30 June 2020 to complete their application.

Does this affect IT Governance?

In support of this change, IT Governance will become an IASME-accredited certification body from April next year.

We will continue to provide the high level of cost-effective ongoing service our clients expect from us and will ensure the transition to the new arrangements is seamless.

In the meantime, and in line with current arrangements supported by the NCSC, our clients will continue to be certified under CREST, and all existing and new certifications will continue to be valid and in line with current requirements.

You can find out more about Cyber Essentials and the ways IT Governance can help you certify on our website.