IASME Governance
Incorporates GDPR Requirements and Cyber Essentials
The Governance standard by IASME was developed over several years as part of a government funded project to create a cyber security standard which would be an affordable and achievable alternative to the international standard, ISO 27001.
The IASME Governance standard allows smaller Businesses to demonstrate their level of cyber security for a realistic cost and show stakeholders that they have a security management system in place to properly protect their customers’ as well as other sensitive information.
The IASME Governance assessment includes a Cyber Essentials assessment as well as GDPR requirements and can be completed either as a self-assessment or on-site audit.
IASME Governance Self-Assessed from £400 + VAT
Depending on the size of your organisation:
- Micro Organisations 0-9 Employees £400 + VAT
- Small Organisations 10-49 Employees £500 + VAT
- Medium Organisations 50-249 Employees £550 + VAT
- Large Organisations 250+ Employees £600 + VAT
Based on international best practice, IASME Governance is risk based and includes key aspects of security such as incident response, staff training, planning and operations. IASME Governance also incorporates a Cyber Essentials assessment and an assessment against the General Data Protection Regulation (GDPR).
IASME Governance Includes:
- Risk Assessment
- Backup
- Policies
- Incident Management
- Data Protection
- Operational Management
The self-assessed option is carried out online using IASME’s secure portal where organisations are required to answer around 160 short questions about their security.
Access to the portal is provided after paying for the assessment and you have up to six months to complete the answers.
The answers are saved automatically by the system as you progress through them.
Once the answers have been completed, the assessment will be marked by Solutions 4 IT and usually a pass or fail is returned to the organisation within 72 hours.
If a pass is achieved an organisation receives certificates showing their compliance to both IASME Governance and Cyber Essentials. The assessment also demonstrates achievement against the requirements of GDPR.
The cost of the assessment is from £400+VAT. Please note that both assessments must be submitted at the same time.
FAQS
WHAT IS THE DIFFERENCE BETWEEN THE CYBER ESSENTIALS SCHEME AND THE IASME GOVERNANCE SCHEME?
- Secure your Internet connection (Firewalls and routers)
- Secure your devices and software (Secure configuration)
- Control access to your data and services (Access control)
- Protect from viruses and other malware (Malware protection)
- Keep your devices and software up to date (Software updates)
IASME Governance certification is aligned to the Government’s Ten Steps to Cyber Security and includes Cyber Essentials certification as well as controls around people and processes. It also covers the General Data Protection Regulation (GDPR) requirements. IASME Governance is aligned to a similar set of controls as ISO 27001 but is more affordable and achievable for small and medium sized organisations to implement.
The cost of Cyber Essentials certification is from £300 + VAT
The cost of basic IASME Governance certification is from £400 + VAT – this cost includes the Cyber Essentials certificate.
IS IASME GOVERNANCE AUDITED THE SAME AS CYBER ESSENTIALS PLUS?
IASME Governance Audited (sometimes known as IASME Gold) is an independent on-site audit of the level of information security provided by your organisation, against the IASME Governance standard. It is aligned to a similar set of controls to ISO 27001 but is more affordable and achievable for small and medium sized organisations to implement.
The standard includes GDPR requirements and adds additional topics that mostly relate to people and processes, for example:
- Risk assessment and management
- Training and managing people
- Change management
- Monitoring
- Backup
- Incident response and business continuity
IS IT FROM £400 IN TOTAL FOR IASME GOVERNANCE (INCLUDING CYBER ESSENTIALS) OR IS IT £300 + VAT PLUS £400 + VAT?
HOW DOES IASME GOVERNANCE MAP TO OTHER STANDARDS INCLUDING ISO 27001?
IASME Governance Audited
– Price on Application
An IASME Governance Audit requires an on-site audit of your governance processes and procedures covered by the IASME Governance standard. IASME Governance Audited (sometimes known as IASME Gold) is an independent on-site audit of the level of information security provided by your organisation. It offers a similar level of assurance to the internationally recognised ISO 27001 standard but is simpler and often more cost effective for small and medium-sized organisations to implement.
The audited IASME Governance standard is IASME’s highest level of certification and is an excellent alternative to ISO 27001 for small and medium sized organisations
IASME Governance Includes:
The standard includes all of the five Cyber Essentials technical topics and adds additional topics that mostly relate to people and processes. For example:
- Risk Assessment & Management
- Monitoring
- Change Management
- Training and Managing People
- Backup
- Incident Response & Business Continuity
By gaining the Audited IASME Governance certificate your organisation is achieving IASME’s highest level of certification and providing assurance to customers and suppliers that your organisation’s security has been audited by a skilled, independent third-party.
Renewal
The audited certification is renewed at the end of years 1 and 2, Solutions 4 IT will contact you before this date to arrange. At the end of year 3 a full audit, as described above, is required again to renew the certification.
FAQS
WHERE IS THE IASME GOVERNANCE AUDITED STANDARD USED?
The procurement teams of many large companies will accept the IASME Governance Audited standard as independent confirmation of good information and cyber security practice.
This is extremely useful when trying to win tenders and renew contracts, particularly where supplier requirements mention ISO 27001.
For example, The Government of Jersey is one organisation that has specified IASME Governance Standard within its security standards document.
HOW IS THE ASSESSMENT CARRIED OUT?
The first step towards achieving the IASME Governance Audited standard is to contact Solutions 4 IT for a quote. You can do this by filling in the form on this page and one of our experts will be in touch.
Solutions 4 IT are a Certification Body for IASME, if you choose to move forward with an audit, we will discuss with you the scope of the assessment and arrange a mutually convenient time to visit your organisation’s head office to carry out an audit of your policies and process.
The audit usually involves interviews with members of staff and a review of documentation and system configuration.
It does not involve a technical assessment unless you are being assessed to Cyber Essentials PLUS at the same time, although it may be helpful to have technical staff available to provide evidence to the assessor of your system configuration.
The assessor may also wish to visit branch offices or other locations in order to satisfy themselves that your good security practice is reflected across the organisation.
Request More Information
& Get In Touch
Here at Solutions 4 IT we appreciate that Cyber Security can seem quite daunting and overwhelming in any business, but we are here to make this easy for you and keep your business well protected.
Please fill out the contact form so one of our experienced and friendly team members can assess your requirements and contact you to discuss further. We will be available to answer any questions.
For more information on Cyber Security click the links below:
Latest Cyber Security News
Firefox Revamps Privacy Feature!
Services and features change and evolve over time, today, Firefox's online privacy feature has been retired. Mozilla, the company behind Firefox, has announced that starting with Firefox version 135, the “Do Not Track” (DNT) checkbox will no longer be available....
How your employees can reduce cybersecurity risks
Research suggests that cyber security breaches are expected to grow to 15.4 million by 2023. Despite technological improvements and advancements in recent years, cyber security still proves to be a growing issue no matter how much security is used.
Cyber Security Training- The Ultimate Weapon For Cyber Attacks
Cyber attacks have become a daily occurrence in our digital world, impacting individuals, businesses, and governments alike. With the increasing reliance on technology, the need for robust cyber security measures has never been greater. Cyber security training has...
4 Cyber Essentials Tips for Businesses
Cyber security and Cyber essentials are crucial components of business operations. Read on to discover 4 tips for protecting your business from cyber-attacks.
Your guide to Cyber Essentials
Cyber Essentials is a scheme backed by the Government aiming to help businesses and organisations alike to be protected against a range of cyber attacks. Cyber criminals target all types of businesses, whatever their size, which is why it is so important to have an infrastructure in place that is designed to keep your business safe.