Jisc provides Cyber Essentials certification to UK colleges and universities
The certification will now form part of Jisc’s suite of professional cyber security services.
In response to member requests, Jisc has expanded its cyber security services offering Cyber Essentials certification which will become a funding requirement for further education and is required for certain government contracts.
A pilot will begin today, 18 May, after which universities and colleges in the UK will be able to access the government-backed scheme through a trusted partner. Jisc can help higher and further education providers to obtain the Cyber Essentials certificate, and to provide advice and guidance along the way.
Tracy Matthews, cyber security assessment manager at Jisc, says:
“We have been asked for this service for some time and we have listened to the needs of our members, and are proud to announce that we are now an IASME approved Cyber Essentials certification body."
The service allows organisations to get trusted advice to improve security, demonstrate that protections are in place via an official certificate and website logo, and stay up to date with annual renewals.
Cyber Essentials assessment includes five key controls:
- Firewalls and internet gateways
- Secure configuration
- Patching
- Access Control
- Malware protection
The Education and Skills Funding Agency (ESFA) has also announced that Cyber Essentials is a funding requirement for FE colleges for the 2020/21 funding year. FE colleges will be expected to meet the requirements on a ‘best endeavours’ basis for Cyber Essentials, with progression to Cyber Essentials Plus from the 2021/22 funding year.
Cyber Essentials is also a requirement for any organisation that wants to bid for central government contracts that involve handling sensitive and personal information or the provision of certain technical products and services.
Matthews adds:
“We have spent time investing in Cyber Essentials, so that we can offer our support and provide our members with a service that can benefit them in taking the first steps in protecting their organisation, achieve certification, and bid for government contracts that require Cyber Essentials certification.
“Members will also have reassurance that their defences are protected against many of the most common cyber-attacks.
“We’re pleased to be able to offer it as part of our professional services, especially at a time when many organisations are particularly focused on cyber security.”
Jisc’s suite of security services are designed to defend the Janet Network, to protect universities and colleges, and to help these organisations protect themselves.