Cyber Essentials - A guide to the Cyber Essentials and Cyber Essentials Plus certifications

Table of contents

1. Cover
2. Title Page
3. Copyright Page
4. About the Author
5. Acknowledgements
6. Contents
7. Chapter 1: The Cyber Essentials scheme
   1. Why get certified?
   2. Which contracts require Cyber Essentials?
   3. What am I protecting?
   4. Beyond and outside Cyber Essentials
   5. Structure of this book
8. Part 1: Requirements for basic technical protection from cyber attacks
   1. Chapter 2: Types of attack
      1. Social engineering
      2. Denial of service (DoS)
      3. Password attacks
      4. Threats outside the perimeter
      5. Misconfiguration and unpatched vulnerabilities
      6. Ransomware
      7. Scoping
      8. Implementation and documentation
   2. Chapter 3: Technical control themes
      1. Technical control theme 1: Firewalls
      2. Technical control theme 2: Secure configuration
      3. Technical control theme 3: User access control
      4. Technical control theme 4: Malware protection
      5. Technical control theme 5: Security update management
      6. Further guidance from Cyber Essentials
9. Part 2: Gaining cyber essentials certification
   1. Chapter 4: Certification
      1. Externally managed services and scope
      2. Cyber Essentials checklist
      3. Cyber Essentials certification process
      4. Getting certified – Cyber Essentials Plus
10. Appendix 1: Further assistance
    1. Practical help and consultancy
    2. Useful documents and further information
    3. The next step – cyber security standards
    4. Staff training
    5. Cyber resilience
11. Appendix 2: IT Governance resources
    1. Certification only
    2. Get A Little Help
    3. Get A Lot Of Help
    4. Cyber Essentials Plus Health Check
    5. Penetration testing
    6. Gap analysis
    7. GRC eLearning courses
12. Further reading