08 December 2016
LightMedia have been awarded the Cyber Essentials certification which is a government-endorsed cyber security standard. The certification demonstrates LightMedia meets a government-set level of protection against common cyber threats, takes cyber and information security seriously, and can work directly for Government contract projects[1].
Protecting customer and company information is of key importance to us at LightMedia and certificatations like this help demonstrate that small to medium size companies can also play their part in cyber security.
LightMedia opted to use the accreditation body 'IT Governance Ltd' on behalf of CREST to sign off the certification. They stipulated that our IT infrastructure was vulnerability tested by themselves using industry standard methods. We decided that by completing the optional test we could demonstrate that we correctly implement our security controls.
Mike Parker, our Head of Technical Development, is a Certified Information Systems Security Professional (CISSP) and is a member of the Institute of Information Security Professionals (IISP) so he completed LightMedia's side of the certification process. We felt that by using our in-house skills to complete the certification we were able to ensure our administrative, physical, and technical controls could be continually monitored and secured and not be seen solely as a 'tick box' exercise.
[1] Since October 2014 Cyber Essentials has been mandatory for suppliers of Government contracts which involve handling personal information and providing some ICT products and services. Holding a Cyber Essentials badge enables you to bid for these contracts.
Read other insights