Cyber Essentials Video shorts recommendations

Short 1: "Cyber Security: A Business Priority, Not Just Tech"

Time Post: 00:01:07.524 – 00:01:42.050
Hook: "Is cyber security just an IT issue in your company? Think again. It’s a business-wide priority!"

• Content:
  • Highlight how cyber security is increasingly seen as critical for the entire business, not just the IT department.
  • Mention how it's important in regulated sectors like financial services and involves processes, controls, and user training.
• CTA: "Start viewing cyber security as a business-wide priority today. Learn more in our full webinar."

Short 2: "Cyber Essentials: The Basics Every Business Needs"

Time Post: 00:03:16.070 – 00:03:34.619
Hook: "What basic security controls should every business have? Cyber Essentials has the answer."

• Content:
  • Introduce Cyber Essentials as a standard designed to protect businesses from the most common cyber threats.
  • Mention how it focuses on fundamental security practices like firewalls, secure passwords, and training.
• CTA: "Get Cyber Essentials certified and ensure your business is protected. Find out how in our full session."

Short 3: "Why Financial Firms are Adopting Cyber Essentials"

Time Post: 00:02:27.860 – 00:02:56.949
Hook: "Why are more financial services adopting Cyber Essentials? The answer might surprise you."

• Content:
  • Discuss how Cyber Essentials is gaining traction in the financial sector due to increasing regulations and client demands.
  • Highlight its growing adoption in response to compliance pressures and cyber risks.
• CTA: "Is your financial firm ready for the next step in cyber security? Watch our webinar to learn more."

Short 4: "Cyber Essentials: A 10-Year Success Story"

Time Post: 00:04:16.800 – 00:04:58.310
Hook: "Cyber Essentials has been around for 10 years—here’s why it’s more important now than ever."

• Content:
  • Discuss the growth of Cyber Essentials over the last decade and how it’s become more essential for businesses today.
  • Mention key milestones like government mandates and updates to support remote work and cloud environments.
• CTA: "Stay ahead in cyber security. Learn how Cyber Essentials can protect your business in our latest webinar."

Short 5: "Cyber Essentials Certification: What You Need to Know"

Time Post: 00:02:56.950 – 00:03:16.070
Hook: "Are you ready for Cyber Essentials certification? Here's a quick guide to what you need to do."

• Content:
  • Introduce the concept of Cyber Essentials certification and explain the difference between Cyber Essentials and Cyber Essentials Plus.
  • Discuss the certification process and how it benefits businesses in demonstrating their commitment to cyber security.
• CTA: "Take the first step toward Cyber Essentials certification. Get the details in our webinar."

Short 6: "The Growing Importance of Cyber Essentials in Financial Services"

Time Post: 00:05:15.440 – 00:05:44.629
Hook: "Why has Cyber Essentials become a game-changer for financial services?"

• Content:
  • Discuss the slow adoption of Cyber Essentials in financial services and how it’s becoming more important due to increasing risks and compliance pressures.
  • Explain how the certification addresses sector-specific security needs.
• CTA: "Financial services, it’s time to get ahead of the curve. Watch our webinar to learn more about Cyber Essentials."

Short 7: "Cyber Essentials: A Simple Answer to Complex Cyber Risks"

Time Post: 00:03:23.290 – 00:03:34.619
Hook: "Cyber security feels overwhelming? Here’s a simple way to protect your business."

• Content:
  • Emphasize how Cyber Essentials helps businesses distill complex cyber security challenges into a set of basic controls.
  • Use the analogy of the interview question about the basic security controls every business should have.
• CTA: "Simplify your approach to cyber security. Get the basics right with Cyber Essentials."

Short 8: "Cyber Essentials: The Secret to Building Trust with Clients"

Time Post: 00:03:34.630 – 00:04:09.299
Hook: "Want to show your clients you take cyber security seriously? Here’s how Cyber Essentials helps."

• Content:
  • Mention how certification helps businesses demonstrate their commitment to cyber security, boosting trust and credibility with clients.
  • Highlight how it can improve business reputation and compliance readiness.
• CTA: "Earn trust and protect your business. Discover how Cyber Essentials can help in our webinar."

Short 9: "Adapting Cyber Essentials for Remote Work & Cloud"

Time Post: 00:05:44.629 – 00:06:09.299
Hook: "How did Cyber Essentials evolve for remote work and the cloud? Here’s what you need to know."

• Content:
  • Discuss how the shift to remote work and cloud environments during the pandemic led to updates in Cyber Essentials.
  • Explain how these changes make Cyber Essentials more relevant to today's business landscape.
• CTA: "Is your business ready for the evolving security landscape? Learn how Cyber Essentials adapts in our full webinar."

Short 10: "Why Cyber Essentials is Crucial for Compliance"

Time Post: 00:05:09.299 – 00:05:44.629
Hook: "Cyber Essentials isn’t just about security—it’s also about compliance. Here’s why."

• Content:
  • Mention how Cyber Essentials helps businesses meet compliance requirements, especially in regulated sectors like finance.
  • Discuss how it aids in audits and demonstrates a commitment to security practices.
• CTA: "Need help with compliance? Get Cyber Essentials certified today."

ss:

Short 11: "Why Financial Services Are Adopting Cyber Essentials"

Time Post: 00:05:44.630 – 00:06:09.900
Hook: "Why are financial firms finally jumping on board with Cyber Essentials? The answer is simple: they’re being targeted more than ever!"

• Content:
  • Explain how financial services, traditionally slow to adopt Cyber Essentials, are now embracing it due to rising cyber risks and heightened regulatory pressures.
  • Mention that financial firms are increasingly targeted by cyber criminals and are seeking more reliable ways to protect themselves.
• CTA: "Is your financial firm staying ahead of cyber risks? Learn more in our full webinar."

Short 12: "Cyber Essentials: A Regulatory Requirement for Financial Firms"

Time Post: 00:06:09.900 – 00:07:16.269
Hook: "Regulators are getting tougher—here’s how Cyber Essentials helps financial firms meet rising standards."

• Content:
  • Discuss how regulators like the FCA are now looking to Cyber Essentials as a foundation for cyber security standards.
  • Explain how financial services businesses can use Cyber Essentials to ensure they’re meeting regulatory expectations and building a solid cyber defense.
• CTA: "Need to meet regulatory cyber security standards? Cyber Essentials is the way forward. Watch our webinar to get started."

Short 13: "Attract Clients with Cyber Essentials Certification"

Time Post: 00:07:31.190 – 00:07:57.760
Hook: "Want to win new clients? Demonstrate your commitment to cyber security with Cyber Essentials!"

• Content:
  • Highlight how Cyber Essentials helps firms—especially startups—show potential clients that they’re secure and trustworthy.
  • Mention that clients increasingly expect businesses to prove their security posture, and Cyber Essentials is a great way to do that.
• CTA: "Attract new business with Cyber Essentials. Find out how in our full webinar."

Short 14: "The Growing Threat of Supply Chain Risks"

Time Post: 00:08:44.110 – 00:08:58.269
Hook: "Your cyber security doesn’t just protect you—it protects your clients too. Here’s why supply chain risks matter."

• Content:
  • Discuss the rising risk of cyber criminals targeting suppliers as a way to gain access to their clients.
  • Explain how Cyber Essentials certification can help businesses demonstrate that they’re not a weak link in their client’s supply chain.
• CTA: "Want to protect your business and your clients from supply chain risks? Learn how Cyber Essentials can help."

Short 15: "Cyber Essentials: A Simple, Proven Framework"

Time Post: 00:08:58.450 – 00:09:12.040
Hook: "Cyber security doesn’t have to be complicated—Cyber Essentials makes it simple."

• Content:
  • Explain how Cyber Essentials distills complex cyber security challenges into a simple set of core security controls.
  • Emphasize how this simplicity benefits businesses, especially small to medium-sized firms without extensive security expertise.
• CTA: "Make cyber security simple and accessible with Cyber Essentials. Get started today!"

Short 16: "Protect Your Business: Cyber Essentials Cuts 90% of Cyber Threats"

Time Post: 00:09:40.900 – 00:10:03.759
Hook: "What if you could protect your business from 90% of cyber threats with one certification?"

• Content:
  • Highlight how Cyber Essentials addresses common, unsophisticated cyber threats that could easily impact any business.
  • Mention that implementing Cyber Essentials can protect up to 90-95% of threats, reducing your exposure to common risks.
• CTA: "Take control of your cyber security today. Learn how Cyber Essentials protects your business in our webinar."

Short 17: "Save on Cyber Insurance with Cyber Essentials"

Time Post: 00:10:03.760 – 00:10:23.819
Hook: "Want to lower your cyber insurance premiums? Here’s how Cyber Essentials can help."

• Content:
  • Explain how achieving Cyber Essentials certification can result in discounts on cyber insurance premiums—between 5% and 20%.
  • Emphasize that as the threat landscape grows, cyber insurance costs are rising, making Cyber Essentials a smart way to manage insurance expenses.
• CTA: "Reduce your insurance premiums and improve your security. Watch our webinar to find out more."

Short 18: "Regulation and Cyber Essentials: What Financial Firms Need to Know"

Time Post: 00:10:23.820 – 00:10:52.349
Hook: "Cyber Essentials isn’t just a good idea—it’s part of regulatory frameworks for financial firms."

• Content:
  • Discuss how the FCA and other regulators are encouraging businesses to adopt standards like Cyber Essentials to ensure a solid foundation in cyber security.
  • Mention that Cyber Essentials is part of a broader set of frameworks that help financial services meet regulatory requirements.
• CTA: "Ensure your business meets regulatory expectations with Cyber Essentials. Get the details in our full webinar."

Short 19: "Cyber Essentials: A Journey to Stronger Cyber Security"

Time Post: 00:11:09.920 – 00:11:44.340
Hook: "Cyber Essentials is a journey—here’s how to take the first step toward robust cyber security."

• Content:
  • Introduce Cyber Essentials as a two-step process: start with the foundational Cyber Essentials certification, then move up to Cyber Essentials Plus for more assurance.
  • Explain how the process helps businesses progressively build and verify their cyber security posture.
• CTA: "Ready to take the first step toward a secure business? Start your Cyber Essentials journey today."

Short 20: "The Difference Between Cyber Essentials and Cyber Essentials Plus"

Time Post: 00:11:44.340 – 00:12:04.260
Hook: "What’s the difference between Cyber Essentials and Cyber Essentials Plus? Let’s break it down."

• Content:
  • Explain the difference between Cyber Essentials (self-attested) and Cyber Essentials Plus (verified with external testing).
  • Mention that businesses must achieve Cyber Essentials before moving on to the Plus level for more rigorous testing and assurance.
• CTA: "Understand the difference and choose the right level for your business. Get the details in our webinar."

21

00:14:49.460 --> 00:14:59.880
Timely Patch Management

• Action: Ensure that critical and high-level security patches are applied within 14 days of release. Implement an automated patch management system and keep track of critical patches to meet compliance requirements.

22

00:15:00.330 --> 00:15:14.980
Secure Configurations & Minimizing Vulnerabilities

• Action: Regularly review systems for unused applications and disable unnecessary features to minimize attack surfaces. Follow best practice configurations for all devices and software.

23

00:15:18.220 --> 00:15:30.099
Scope Definition for Cyber Essentials

• Action: Clearly define your scope by identifying which devices, software, and networks are covered. Consider segmenting or excluding unsupported systems, and plan accordingly.

24

00:15:30.930 --> 00:15:37.959
Gap Analysis & Readiness Check

• Action: Use ISME and NCSC tools or other readiness checks to assess your current security posture and identify areas for improvement. Perform a gap analysis against the Cyber Essentials requirements.

25

00:15:38.130 --> 00:15:50.209
Cyber Essentials vs. Cyber Essentials Plus

• Action: Once Cyber Essentials is achieved, prepare for Cyber Essentials Plus by performing pre-tests and vulnerability scans. Ensure your systems are ready for deeper technical checks, such as internal scans and third-party assessments.

26

00:15:50.450 --> 00:16:08.239
Third-Party Assessments Preparation

• Action: Ensure devices (both corporate and BYOD) meet security requirements before allowing third-party assessors to access them. Plan for third-party access and use tools like mobile device management (MDM) for secure device access.

27

00:16:09.250 --> 00:16:21.350
Common Pitfalls in Cyber Essentials

• Outdated Software

  • Action: Regularly check software for end-of-life or unsupported versions and either update them or segment them appropriately.

• BYOD Management

  • Action: Implement MDM solutions to manage personal devices accessing company data.

• SaaS Application Security

  • Action: Ensure all SaaS applications used within the organization are secured with multi-factor authentication (MFA) and account separation.

28

00:16:21.880 --> 00:16:25.109
Firewall Configurations

• Action: Implement firewall rules not just at the network perimeter but also on individual devices and servers. Ensure firewall configurations are reviewed regularly.

29

00:16:25.500 --> 00:16:38.990
Separation of Administrative Rights

• Action: Enforce the principle of least privilege by ensuring users only have the minimum necessary access. Separate administrative accounts and apply MFA to these accounts.

30

00:16:40.180 --> 00:16:56.879
Email Security & Attachment Rules

• Action: Implement strict email filtering rules, especially for macro-enabled documents and PDFs. Regularly scan email attachments for malware.

31

00:16:58.130 --> 00:17:15.329
Keep the Questionnaire Simple

• Action: Answer yes/no questions in the Cyber Essentials questionnaire directly. Only provide additional details when necessary to avoid complicating the process.

32

00:17:15.650 --> 00:17:35.900
Getting Started with Cyber Essentials

• Action: Download the Cyber Essentials questionnaire from the ISME website and begin reviewing your organization's security practices. Identify areas that need attention and plan remediation efforts.

33

00:17:36.830 --> 00:17:50.750
Documenting the Cyber Essentials Roadmap

• Action: Develop a clear roadmap for achieving Cyber Essentials and Cyber Essentials Plus. Assign roles and responsibilities to ensure progress and accountability.

34

00:17:52.630 --> 00:18:01.239
Leadership Buy-In

• Action: Ensure leadership supports the Cyber Essentials initiative. Help them understand the business benefits, such as protecting company data and building trust with clients.

35

00:18:03.030 --> 00:18:12.419
Readiness Check

• Action: Perform an early readiness check using available tools from ISME or third-party providers to identify weaknesses or areas that need attention before submitting your application.

36

00:18:13.070 --> 00:18:19.209
Maturing Security Posture After Cyber Essentials

• Action: After achieving Cyber Essentials, consider adopting additional security frameworks like ISO 27001, NIST, or implementing a formal risk management strategy.

37

00:18:20.150 --> 00:18:36.409
Invest in Ongoing Security Training

• Action: Provide security training for staff at all levels of the organization. This helps ensure that everyone understands their role in protecting company data and systems.

38

00:18:37.520 --> 00:18:59.440
Landware's Support with Cyber Essentials

• Action: If needed, engage a trusted third-party like Landware for assistance with scoping, gap analysis, remediation, and preparation for third-party assessments. Landware can also help with the submission process and pre-tests.

39

00:19:03.030 --> 00:19:23.009
Leveraging Landware’s Expertise for Cyber Essentials Plus

• Action: Use Landware’s services for pre-tests and vulnerability scans to ensure your organization is fully prepared for the Cyber Essentials Plus assessment.

40

00:19:24.550 --> 00:19:27.430
Handling Third-Party Assessment Interactions

• Action: Landware can act as an intermediary between your organization and the third-party assessor, helping to clarify questions and assist with remediation during the assessment process.

41

00:19:51.620 --> 00:20:02.589
Continually Review and Improve Cybersecurity Posture

• Action: Use Cyber Essentials as a foundation to continue enhancing your organization's cybersecurity maturity. Implement additional frameworks like ISO 27001 and NIST to strengthen your security posture further.

42

00:20:11.640 --> 00:20:17.530
Establish a Culture of Cybersecurity Awareness

• Action: Foster a cybersecurity-aware culture within the organization, making sure all employees understand the importance of cybersecurity and their role in maintaining it.

43

00:20:31.650 --> 00:20:55.429
Monitoring and Incident Response Systems

• Action: Implement and regularly review your monitoring and incident response systems to ensure quick detection and mitigation of potential threats.

44

00:21:07.450 --> 00:21:09.759
Manage Third-Party Access Effectively

• Action: Review and enforce security protocols for third-party access to your network, ensuring that any external service providers are compliant with your security requirements.

45

00:29:23.290 --> 00:29:35.370
Client Demand for Cyber Essentials Certification

• Action: If clients or potential clients are asking for your Cyber Essentials certification, prioritize obtaining it to maintain competitive advantage and meet customer requirements. Ensure this certification becomes part of your company’s compliance and marketing strategy.

46

00:29:37.386 --> 00:29:43.929
Primary Drivers for Cyber Essentials

• Action: Identify and align the primary drivers behind your desire for Cyber Essentials certification. Whether driven by regulation, client demand, or internal policy, understanding these drivers will help you prioritize security improvements and resource allocation.

47

00:29:48.180 --> 00:29:54.950
Determine Certification Priority

• Action: Assess the urgency of obtaining Cyber Essentials certification based on business needs, client expectations, or regulatory requirements. Ensure senior leadership is aligned with these priorities to support smooth implementation.

48

00:30:03.510 --> 00:30:19.579
Evolving Cyber Essentials Awareness

• Action: Stay informed about the growing adoption of Cyber Essentials across industries. Expect increased requests for certification, especially as supply chain security becomes a higher priority for organizations across various sectors.

49

00:30:19.980 --> 00:30:28.600
Prepare for Future Certification Demand

• Action: Given the increasing importance of Cyber Essentials, begin preparing now for certification, even if it’s not an immediate requirement. Early adoption can place you ahead of competitors and demonstrate proactive security measures to clients.

50

00:31:00.660 --> 00:31:02.269
Cyber Essentials Readiness for Clients

• Action: If you are already a Landware client, leverage existing frameworks like Finance 4/365 to streamline the process of achieving Cyber Essentials. Align all internal and external technology providers to cover any gaps.

51

00:31:04.900 --> 00:31:15.069
Addressing Certification Gaps in Supply Chain

• Action: Ensure that all third-party providers in your supply chain meet the Cyber Essentials criteria, and address any gaps by engaging with providers to ensure compliance. This strengthens your overall cybersecurity posture and meets certification requirements.

52

00:31:27.180 --> 00:31:36.669
Physical vs. Remote Cyber Essentials Plus Audits

• Action: When preparing for Cyber Essentials Plus, determine whether a physical site visit is necessary for your audit or if a remote review is sufficient. Factor in the costs and the added value of an in-person audit if relevant for your business.

53

00:32:02.530 --> 00:32:04.625
Cyber Essentials Adaptation in the Financial Sector

• Action: Understand the reasons why financial services have been slower to adopt Cyber Essentials and consider the implications for your industry. Position Cyber Essentials as an essential certification to meet increasing regulatory expectations.

54

00:32:05.420 --> 00:32:37.259
The Growing Importance of Cyber Essentials in New Entrants

• Action: New startups, especially in regulated sectors like finance, should prioritize Cyber Essentials certification to gain trust and establish credibility. Use it as a foundation for building a solid cybersecurity strategy that aligns with industry regulations.

55

00:33:03.039 --> 00:33:08.039
Track Industry Adoption of Cyber Essentials

• Action: Monitor industry adoption rates of Cyber Essentials certification, especially in your sector. As adoption grows, early certification can provide a competitive edge and assure clients of your commitment to cybersecurity.

56

00:33:12.630 --> 00:33:13.740
Evaluate Cyber Essentials Timeline for Clients

• Action: If you’re a client of a service provider like Landware, assess how quickly you can achieve Cyber Essentials certification. Expect shorter timelines for clients already using secure frameworks like Finance 4/365, which align with Cyber Essentials requirements.

57

00:33:34.650 --> 00:33:37.770
Secure Configuration of SaaS Applications

• Action: Pay special attention to the configuration and security of SaaS applications used in your organization. Ensure they meet Cyber Essentials requirements, particularly around access controls, patch management, and multi-factor authentication.

58

00:34:00.040 --> 00:34:13.970
Manage Third-Party SaaS Applications Effectively

• Action: Be aware of third-party SaaS applications that may not be in full compliance with Cyber Essentials. Take steps to cover these apps, either by securing them with additional controls or by removing unnecessary or risky apps from your environment.

59

00:34:42.050 --> 00:34:52.920
Clarify Cyber Essentials Plus Scope with Providers

• Action: Ensure all technology providers, including third-party vendors, meet Cyber Essentials Plus requirements. This includes defining scope and coverage to make sure all your tools and systems are properly assessed and secure.

60

00:35:13.680 --> 00:35:20.540
Physical and Remote Cyber Essentials Plus Audits

• Action: Clarify the expectations for Cyber Essentials Plus audits. Depending on the provider, these can be done remotely or with an on-site visit, which may add value or cater to specific organizational needs.

61

00:35:21.080 --> 00:35:25.214
Physical Audits as a Premium Service

• Action: If your business requires a higher level of security assurance, consider opting for an in-person Cyber Essentials Plus audit, which may offer a more comprehensive review of your security posture and provide a premium service for higher assurance.

62

00:36:05.420 --> 00:36:08.495
Address the Adoption Delay in Cyber Essentials

• Action: Understand that slow adoption in some sectors can be due to historical priorities. However, the rise of new regulatory frameworks is likely to push industry-wide adoption of Cyber Essentials. Stay ahead by adopting it early.

63

00:37:08.270 --> 00:37:24.340
Cyber Essentials as a Foundational Requirement for New Entrants

• Action: New businesses, especially in regulated sectors like financial services, should view Cyber Essentials as an essential certification for market entry. It can facilitate compliance with industry regulations and reassure clients about their security measures.

64

00:37:51.920 --> 00:37:56.120
Use Cyber Essentials as a Foundation for Further Security Initiatives

• Action: Treat Cyber Essentials as the starting point for your cybersecurity journey. Once achieved, consider building upon it with additional frameworks or certifications like ISO 27001 or NIST to further mature your organization’s security posture.

65

00:38:05.420 --> 00:38:08.625
Align MFA Policy for SaaS Applications

• Action: Enforce multi-factor authentication (MFA) on all SaaS applications that support it. If an application doesn’t support MFA, document it appropriately and ensure compensating controls are in place.

66

00:38:50.490 --> 00:39:06.489
Minimize Personal Data Exposure During Assessments

• Action: When preparing for Cyber Essentials assessments, make sure personal devices used by staff are properly segmented. Provide assessors with only the necessary access to work-related data to prevent exposure of personal information.

67

00:39:06.490 --> 00:39:23.079
Handling Personal Devices for Cyber Essentials Tests

• Action: Implement app protection policies on personal devices used for business purposes. Ensure that assessors only test company-specific applications and configurations, and not personal or non-business-related apps during Cyber Essentials assessments.

68

00:39:24.530 --> 00:39:29.099
Clear Personal and Work Data Segmentation

• Action: Create clear boundaries between work and personal data on devices used by employees. Implement technical controls to ensure that personal information is not exposed during Cyber Essentials assessments or other security reviews.