“While UK government scheme Cyber Essentials works to protect SMEs from cyber risks, it can provide a false sense of security that firms are completely protected,” reports Insurance Times.
Very different from broader proposed US government involvement in cyber, the British program offers two levels:
“Cyber Essentials – this enables organisations to assess themselves against the five security controls. A qualified assessor then verifies the information provided. It includes automatic cyber liability insurance for certified organisations that have less than £20m annual turnover (terms apply).
Cyber Essentials Plus – a qualified assessor examines the five security controls and tests that they work through a technical audit. It also includes automatic cyber liability insurance for certified organisations that have less than £20m annual turnover (terms apply).”