Regulatory Standards · United Kingdom
Cyber Essentials
Cyber Essentials, kept true all year.
Cyber Essentials certifies five baseline technical controls and is required for many UK government contracts. Astragar keeps the evidence, especially patching, current between certifications.
Register interest in Cyber EssentialsComing to Astragar GRC
5
Technical controls
14 days
To apply critical and high-risk security updates
Plus
Cyber Essentials Plus adds hands-on technical verification
What Cyber Essentials requires
The obligations, in brief.
Firewalls
Boundary firewalls and internet gateways configured securely.
Secure configuration
Remove defaults and unnecessary software and accounts.
Access control & malware
Least privilege, MFA and malware protection.
Security updates
Patch critical and high-risk vulnerabilities within 14 days.
How Astragar helps
From checklist to measurable risk.
01
Requirement → control mapping
Map every Cyber Essentials requirement to controls, systems, assets and owners.
02
Evidence, continuously
Collect and maintain evidence, with sign-off from contributor to IT auditor, CISO and executive office.
03
Exposure behind the gaps
See which vulnerabilities and sensitive data put Cyber Essentials controls at risk.
04
Risk in financial terms
Prioritise remediation by business and financial impact, not checklist order.
Astragar's vulnerability prioritisation shows exactly which updates breach the 14-day rule.
Sign-off workflow
Evidence Contributor
→IT Auditor
→CISO
→Executive Office
Find the data. Test the controls. Reduce the risk.
Cyber Essentials mapping is coming to Astragar GRC. Talk to us about early access and how your existing evidence already applies.
Talk to usAstragar supports compliance programmes with technical evidence and risk analysis. It does not provide legal advice or issue certifications.
See your cyber risk in $ terms, not CVSS scores.
