way please enter NO in the box. If this is left blank you imply your consent. Where did you hear about Cyber Essentials? SME Definition Company Balance Employees Turnover category sheet total Medium-sized < 250 50 m 43 m ≤ € ≤ € Small < 50 10 m 10 m ≤ € ≤ € Micro < 10 2 m 2 m ≤ € ≤ € As a Cyber Essentials scheme Applicant, you must ensure that your organisation meets all the Risk Factory requirements. You are also required to supply various forms of evidence before can award certification at the level you seek. Please use screen grabs and insert policy notes where possible. Let’s get started; Whilst completing this questionnaire please use the document, for IT infrastructure published by QG 6th February 2017. We ‘Requirements – have cross referenced each clause and question so you can see clearly the intent of the question you are answering at the time. Establish the boundary of scope for your organisation, and determine what is in scope (including locations, network boundaries, management and within this boundary. ownership. Where possible, include IP addresses and/or ranges.) Ensure your password policy is in place and meets the password based-authentication requirements, as this is used in three of the five control themes. Review each of the five technical control themes and the controls they embody as requirements. Take steps as necessary to ensure that your organisation meets every requirement, throughout the scope you have determined. If you can’t, highlight any compensating controls you have put in place to mitigate the risk. Business Scope
way please enter NO in the box. If this is left blank you imply your consent. Where did you hear about Cyber Essentials? SME Definition Company category Employees Turnover Balance sheet total Medium-sized < 250 ≤ € 50 m ≤ € 43 m Small < 50 ≤ € 10 m ≤ € 10 m Micro < 10 ≤ € 2 m ≤ € 2 m As a Cyber Essentials scheme Applicant, you must ensure that your organisation meets all the requirements. You are also required to supply various forms of evidence before Risk Factory can award certification at the level you seek. Please use screen grabs and insert policy notes where possible. Let’s get started; Whilst completing this questionnaire please use the document, ‘Requirements for IT infrastructure published by QG – 6th February 2017. We have cross referenced each clause and question so you can see clearly the intent of the question you are answering at the time. Establish the boundary of scope for your organisation, and determine what is in scope within this boundary. (including locations, network boundaries, management and ownership. Where possible, include IP addresses and/or ranges.) Ensure your password policy is in place and meets the password based-authentication requirements, as this is used in three of the five control themes. Review each of the five technical control themes and the controls they embody as requirements. Take steps as necessary to ensure that your organisation meets every requirement, throughout the scope you have determined. If you can’t, highlight any compensating controls you have put in place to mitigate the risk. Business Scope
Risk-Factory-Cyber-Essentials-Questionnaire-v1.050-July-2017-questions.docx