NCSC Funded Cyber Essentials Programme
Small organisations from specific sectors in the UK are being offered practical support to achieve Cyber Essentials Plus at no cost to the organisation.
Opportunity Details
Applications open until funding is used up; organisations will be contacted directly after they apply.
Award
Practical support from an Advisor to achieve Cyber Essentials Plus (does not include the cost of any additional software or hardware identified by the Advisor that is required to achieve Cyber Essential Plus), around 20 hours of remote support with an Advisor, and hands-on technical verification.
All modern businesses face a threat from cyber attack but some organisations have a particularly increased risk. This might be because they hold sensitive information about the people that they work with, or they are perceived as an easy target by cyber criminals.
For those sectors most at risk – specifically quantum, AI, semiconductors, engineering biology / synthetic biology, advanced materials, advanced robotics, fusion energy and space/satellites – the UK Government National Cyber Security Centre (NCSC) is launching a Funded Cyber Essentials Programme. The training is from the NCSC’s delivery partner, IASME. This scheme aims to provide vulnerable organisations with help to implement baseline security controls to prevent the most common types of cyber attack.
The programme will offer practical support from an Advisor to achieve Cyber Essentials Plus at no cost to the organisation. Please note, this does not include the cost of any additional software or hardware identified by the Advisor that is required to achieve Cyber Essential Plus.
Qualifying organisations will receive around 20 hours of remote support with an Advisor. This time will be spent identifying and implementing improvements that are right for the size and needs of the organisation and supporting them in implementing the 5 Cyber Essentials technical controls. This will be followed by a hands-on technical verification that the controls have been put in place.
If it is not possible for the organisation to achieve Cyber Essentials Plus, the Advisor will help organisations implement as many of the technical controls as possible and give the organisation a clear list of the additional actions they need to undertake to become compliant. The scheme is designed to lead an organisation through the technical controls required to achieve Cyber Essentials certification, followed by the audit for Cyber Essentials Plus. No previous cyber security certification or experience is necessary.
To qualify for this scheme, companies must be a micro or small business (1 to 49 employees) registered in the UK and working on:
- The development of fundamental Artificial Intelligence (AI) technologies, OR the innovative application of Artificial Intelligence technologies in the following sectors: Public safety and health, Defence and security.
- The development of novel Quantum technologies.
- The design, development or manufacturing of semiconductors / semiconductor IP blocks.
- The development of Engineering Biology or Synthetic Biolog
- Advanced Materials – Companies involved in developing advanced materials that have enhanced properties and performance, often incorporating new compositions or structures to improve strength, durability, lightweight, or functionality for specific applications
- Advanced Robotics – companies involved in the development of autonomous robotics that can perform complex tasks and adapt to novel environments using advanced technologies
- Fusion Energy – Companies involved in the development of methods and systems designed to harness the energy produced by nuclear fusion
- Satellite and Space Technologies – Companies involved in the development, deployment, and utilisation of satellites and related systems for various applications, including communication, navigation, Earth observation, and scientific research. This may include satellite design, launch systems or ground control operations
- Specialist National Security Applications/Solutions – Companies in any of the 17 defined sensitive areas of the economy covered by the Notifiable Acquisition Regulations under the National Security and Investment Act are eligible. Each application under this category will be considered on merit & a discretionary basis.
and must meet the following criteria:
- Has not previously participated in the NCSC Funded Cyber Essentials Programme
- Does not currently hold Cyber Essentials Plus (CE+) certification, has not been awarded CE+ certification since January 2023 and is not currently in the process of applying for CE+ certification
If your organisation meets the above criteria and you would like to apply for the Funded Cyber Essentials Programme, please apply at the link below.