Initial Assessment: the first step would involve an initial assessment of the business's current cyber security posture. This would involve reviewing the company's IT infrastructure, policies, and procedures to identify potential vulnerabilities and risks.

Gap Analysis: based on the initial assessment, the company would perform a gap analysis to identify the gaps between the business' current cyber security posture and the requirements of the Cyber Essentials framework. This will help the company determine the specific areas that need to be addressed to achieve Cyber Essentials certification.

Recommendations: once the gaps have been identified, we provide recommendations on the steps that the business needs to take to address them. TwentyFour IT will give you guidance regarding the necessary technical controls, policies, and procedures that need implementing in order to meet the requirements of the Cyber Essentials framework.

Implementation: the next step would involve implementing the agreed upon controls, policies, and procedures to address the gaps identified in the gap analysis. This could involve installing security software, configuring firewalls, updating policies and procedures, and providing staff training on cyber security best practices.

Assessment: once the necessary controls have been implemented, we conduct an assessment to verify that the business meets the requirements of the Cyber Essentials framework. This could involve conducting vulnerability scans, penetration testing, and reviewing policies and procedures.

Certification: if the assessment is successful, we provide you with a Cyber Essentials certificate, which confirms that the business has met the requirements of the framework. The certificate demonstrates to customers, partners, and stakeholders that the business has taken the necessary steps to protect against common cyber security threats.