BuildingFloorsPlanEvidenceFrameworks
Harbour & Finch Accountants Ltd
Cyber EssentialsISO/IEC 27001:2022

Not ready: 7 requirements failing

Cyber Essentials · 5 not met · 2 partly met · 3 need your evidence · 2 met

25%ready
Tall and orange: not metOrange roof: partly metScaffolding: needs your evidenceLow and pale: met

Certification is pass/fail: every requirement must be met. Automated requirements are re-assessed on every survey. Attestations need a document or statement from you, are hash-chained into the evidence ledger and expire after 12 months.

ThemeRequirementStatusEvidenced by
FirewallsBoundary firewall/router in place, default admin password changed, admin interface not exposed to the internetEvidence needed
FirewallsSoftware firewall enabled on every in-scope deviceMet
DEV-005
Secure configurationUnnecessary accounts, software and insecure defaults removed or disabledNot met
IDN-004IDN-007DEV-001INF-001INF-005
Secure configurationDevices require a PIN, password or biometric to unlock, with brute-force throttling
Evidence needed
Secure configurationAuto-run disabled for untrusted contentEvidence needed
Security update managementAll software is licensed and supported by the vendorNot met
DEV-003INF-002
Security update managementCritical and high-risk updates installed within 14 days of releaseNot met
DEV-004
User access controlAccounts are only created for authorised people, with access appropriate to their rolePartially met
IDN-006INF-004
User access controlAccounts are removed or disabled when no longer requiredPartially met
IDN-005
User access controlAdministrative accounts are separate and used only for administrative tasksNot met
IDN-003IDN-008INF-003
User access controlMulti-factor authentication on all cloud services, for every userNot met
IDN-001IDN-002IDN-004
Malware protectionAnti-malware (or application allow-listing) on every in-scope deviceMet
DEV-006INF-006