Achieving Cyber Essentials Plus Certification

Oct 24, 2024

Background

 

“GKR is the largest scaffolding contractor in London and the South-East, working on epic projects such as Battersea Power Station and many of London’s skyscrapers and heritage buildings. Our reputation has been built on safety, innovation and our ability to work in complex environments.

Our role on site is to build access in even the highest risk environments, so that every other trade can work safely and productively.

Over the last 10 years, GKR has been recognised by the industry as leading the way in training, innovation, and health, safety and wellbeing.

We were recently named as Specialist Contractor of the Year 2022 at the Construction News Awards.

We are an owner operated business with over 250 members of staff working across more than 40 construction projects in the region, turning over £28m per year. Our clients include some of the largest contractors in the UK such as Mace, ISG, Sir Robert McAlpine and Wates.”

Cyber-crime dominates
news channels.

According to Gov.uk, Half of businesses (50%) and around a third of charities (32%) report having experienced some form of cyber security breach or attack in the last 12 months. This is much higher for medium businesses (70%), large businesses (74%) and high-income charities with £500,000 or more in annual income (66%).

Protect Your Business with
Cyber Essentials Certification

The more we rely on digital systems, the more crime moves from physical to virtual. We either sit back and wait for the inevitable compromise – email hack, or maybe worse – ransomware attack, or we take a proactive ‘safe as houses’ approach. We prefer the latter.

As with all solutions that we offer, our approach to Cyber Security is highly proactive, addressing every aspect of your environment, virtual, physical, human or machine and providing a solution that protects and reduces risk (as much as is possible) from the outset.

Cyber Essentials Certification

Cyber Security Bundles

 

Project Description

 

Cyber Essentials is a security standard backed by the UK Government. It’s regularly required to tender for government & private sector projects, and ensures best practices are followed to prevent 80% of cyberattacks.

There are two levels of Cyber Essentials; the basic certification and the Cyber Essentials Plus certification. The difference between the two levels of Cyber Essentials is that Cyber Essentials Plus goes one-step further and verifies that the five key controls are in place and working with a vulnerability scan.

GKR Scaffolding first needed to complete the basic Cyber Essentials certification before being able to take the Cyber Essentials Plus assessment.

The certification requires security measures like multi-factor authentication and strong passwords to be in place. Fortunately, the company already had strong cybersecurity protocols, which made achieving Cyber Essentials fairly easy.

Impreza IT had spent extensive time securing the company’s network and ensuring that all vulnerabilities were remediated. As a result of this, the external assessment carried out by the Cyber Essentials Plus assessor was passed with relative ease.

The end result was not only reassurance for the company that its IT infrastructure was indeed as secure as believed, but also increased confidence from clients that the company adhered to the highest standards of security and handling of sensitive data.

 

Project Benefits

  • Provided assurance for the company’s clients that they follow best practice security
  • Gained certifications required to continue to tender for government contracts
  • Recognised by cyber liability insurance policy

Is Your Business Vulnerable to Cyber Attacks?

All sectors and businesses are at risk of falling victim to cyber attacks, which can lead to data breaches, financial losses, and reputational damage. With the increasing frequency and sophistication of these attacks, it’s crucial to take proactive measures to protect your company’s sensitive information and maintain the trust of your clients.

Get Certified

Network

Endpoints

People

Data