Cyber Foundations Assessment

Aligned with Cyber Essentials Plus and CIS 18 controls

 

Implementing CE+ means that

0%
of cyber attacks could be prevented
0%
of businesses with CE+ say it increased trust
1. Cyber Fundamentals Assessment Overview

The Cyber Fundamentals Assessment (CFA) is designed to help SMBs understand their cybersecurity baseline. Delivered by an NCSC-accredited Cyber Advisor, it focuses on essential technical controls aligned with Cyber Essentials and CIS 18, offering a practical, non-disruptive alternative to a formal audit.

2. Interviews & Technical Reviews

The assessment includes stakeholder interviews and technical reviews, providing a clear view of strengths and vulnerabilities. It’s structured to be accessible for all stakeholders and typically takes two to three days (or two weeks??), covering assessment, reporting, roadmap creation, and optional reassessment.

3. Maturity Score & Radar Charts

Organisations receive a maturity score aligned to CIS 18 Information Groups (IG1–IG3), with results presented in radar charts via the Saepio Cyber Security Platform. This visual benchmarking helps track progress and compare performance against similar businesses.

4. Actionable Reporting & Insights

Reports are simple to understand and highlight how close the organisation is to Cyber Essentials Plus. With automated reporting, trend insights, and prioritised actions, the CFA offers a clear path to stronger cyber resilience.

SPEAK TO A MEMBER OF THE TEAM TO FIND OUT MORE

What to Expect

1

Scoping

1

Initial briefing call.

2

Stakeholder Interviews

2

1.5 hour online interviews with 2 to 4 stakeholders.

3

Assessment

3

By an NCSC accredited Cyber Advisor.

4

Roadmap

4

Creation and recommendations.

5

Full Reporting

5

Including visual representations.

Key Benefits of the CFA

Clarity on Cybersecurity Baseline
Prioritised Improvement Roadmap
Trackable Maturity Scoring
Cyber Essentials+ Readiness
Cost-Effective for SMBs
Supports Compliance & Insurance Requirements

SPEAK TO A MEMBER OF THE TEAM TO FIND OUT MORE

“As an NCSC Assured Service Provider, we launched our Cyber Foundations Assessment (CFA) giving clarity for businesses to 'rightsize' their security posture.

The CFA will help organisations understand their current security posture and identify the most effective steps to strengthen it, without unnecessary complexity or cost.”

Kieran Marshall
NCSC Assured Service Provider