The TALL Group of Companies, the security print and electronic payment product provider, has gained the UK Government-led Cyber Essentials certification. The Cyber Essentials scheme is part of the UK Government’s National Cyber Security Strategy and provides an independent assessment of the essential security controls that businesses need, to mitigate risks from web-based threats and cyber-crime.
UK Government argues that by going through a Cyber Essentials assessment, businesses not only lower their risk of serious data and financial loss, including intellectual property theft but also, by displaying the Cyber Essentials’ badge on marketing collaterals, they show to customers and suppliers that they have taken steps to be fundamentally cyber safe.
Martin Ruda, Group Managing Director of the TALL Group, said: “We believe we are one of the first security printer and electronic payments solutions providers in the UK to achieve this Cyber Essentials certification and I would like to congratulate our teams across the Group in achieving this standard. Our three Group sites in Runcorn, Hinckley and Lisburn exchange secure data on a daily basis and so this important Government-led initiative provides a clear focus on cyber-crime. In addition, moving forward, because it is mandatory when bidding for a range of Government contracts, we will be in a better position to compete for this type of business.
“As a Group, we are already implementing the standard ISO27001 that provides a specification for an information security management system (ISMS). Our ISMS outlines our Group policies and procedures for all legal, physical and technical controls that make up our information risk management processes,” he added.
According to its documentation, the international ISO 27001 was developed to “provide a model for establishing, implementing, operating, monitoring, reviewing, maintaining and improving an information security management system.” As such, ISO 27001 provides a top-down, risk-based approach and is technology-neutral whereas the Cyber Essentials certification focus is on key areas of IT systems security and provides real assurance that the TALL Group has appropriate measures in place to secure sensitive data.
To pass the Cyber Essentials, TALL had to complete a questionnaire, covering five key elements. The TALL Group’s network also underwent an external vulnerability assessment, by QG Business Solutions Ltd on behalf of the Certification Europe body, to ensure the company had sufficient and secure controls at its connections with the web and wider world.
Systems that fall within the scope of the Cyber Essential Scheme include internet connected Group devices such as desktop PCs, laptops, tablets and smartphones, and other internet connected systems including email, web and application servers.
The Cyber Essential scheme requires these items to be put in place within an organisation:
Boundary firewalls
Internet Gateways
Secure configuration
User access control
Malware protection; and
Patch management.
QG Business Solutions Ltd. awarded the certification to TALL after an evaluation of its security. Brian Lightowler of QG said: “We enjoyed working with The TALL Group of Companies to help them achieve the Cyber Essentials certification and applaud their initiative and strong commitment to security. Cyber Essentials focusses attention on key areas of IT system security and provides real assurance that TALL has appropriate measures in place to secure data. And this is a major benefit to other organisations that can also have greater confidence in cyber security if they buy from suppliers who are certified to the new standards.”
