Cyber Essentials mark readiness

Prepare for Singapore’s Cyber Essentials mark with a gap assessment, remediation plan and evidence pack.

Discuss Your Certification Timeline
Format
Fixed-scope readiness assessment
Your team
Your IT lead or managed service provider, and the person accountable for certification
Part of
Governance, risk and compliance advisory

The challenge

Customers and tenders increasingly ask for recognised evidence of basic security controls. Gaps in documentation and evidence are often found late, close to the assessment date, when there is little time to fix them.

  • When to engage

    For organisations preparing for a first assessment, renewing certification or responding to a customer request for evidence of security controls.

  • How we work

    We agree which systems and teams are in scope, review your controls and evidence, and prioritise gaps with your IT team. We then review the evidence you plan to submit. A certification body appointed by the Cyber Security Agency of Singapore (CSA) conducts the independent assessment.

  • What you receive

    • Readiness assessment with findings and evidence references
    • Remediation plan with suggested owners and target dates
    • Evidence index for your independent assessment

  • How to get started

    Share your target assessment date, an overview of the systems in scope and any self-assessment you have started.

    Discuss your certification timeline

Questions

Common questions.

Do you certify us?

No. Cyber Essentials mark assessments are carried out by certification bodies appointed by CSA. We help you prepare so that the independent assessment goes smoothly. Keeping advice and certification separate protects the independence of the assessment.

What comes after the Cyber Essentials mark?

CSA’s Cyber Trust mark is a risk-based certification for organisations with more mature security programmes. If it is a likely next step for you, the remediation plan notes where today’s work will also support it.

Advisory packages

Other packages.

Talk it through first.

Tell us about your situation and timeline. We will confirm whether this package fits, or suggest a better starting point.

Request a Consultation