Case study, Emergency services
Bedfordshire Fire and Rescue Service
With a Cyber Essentials certificate about to expire and a hard deadline, a fire and rescue service covering more than 550 staff and 14 stations needed a Certification Body that could move fast and get it right first time. IASME recommended CRIBB.
Delivered by CRIBB Cyber Security, the assurance arm of the Clipeum group
The outcome
Cyber Essentials renewed and Cyber Essentials Plus achieved on time, for 550+ staff across 14 stations
The challenge
- The service's Cyber Essentials certificate was close to expiry, and its contracts and insurers required continuous certification.
- It wanted to step up to Cyber Essentials Plus in the same window, which means independent technical testing of real devices, not just a questionnaire.
- The estate was varied: virtual desktops, cloud servers and a fleet of mobile devices across 14 sites, all of which had to be in scope.
What we did
- A gap review against the 5 Cyber Essentials controls, with a prioritised list of what would fail and how to fix it.
- Renewal of the Cyber Essentials certificate so there was no gap in cover.
- Cyber Essentials Plus assessment by our assessors: vulnerability scans and technical verification of a sample of virtual desktops, cloud servers and mobile devices.
- Clear reporting the service could hand to its board, insurers and partners.
The result
- Cyber Essentials renewed and Cyber Essentials Plus achieved within the deadline.
- Every device type in the estate verified, including the virtual and mobile estate that often trips organisations up.
- A recommendation from IASME, the scheme's own delivery partner, which is about as strong an endorsement of a Certification Body as it gets.
Keep exploring
Need certification before a deadline?
Tell us the date and what you hold today. We'll map the quickest route and assess you ourselves.