Internal Banner Background Red Wavy Shape

FAQs


 

Q. We have an experienced IT department. Is Cyber Essentials Canada Certification necessary?
Q. What if my IT infrastructure is handled by a third-party provider?
Q. What kinds of attacks does Cyber Essentials Canada protect me from?
Q. What happens if a Cyber Essentials/Cyber Essentials Canada Plus certified company suffers a breach?
Q. What types of companies can be Cyber Essentials Canada certified?
Q. Should I get Cyber Essentials Canada Basic or Cyber Essentials Canada Plus certified?
Q. What evidence is required to become Cyber Essentials Canada certified?
Q. What happens if my organization doesn't meet the Cyber Essentials Canada requirements?
Q. How long does the certification process take?
Q. Will I be provided support during the certification process?
Q. How do I keep my Cyber Essentials Canada certification up to date?
Q. What is The Cyber Highway?
Q. What happens when my account on The Cyber Highway expires?

 

 

Q. We have an experienced IT department. Is Cyber Essentials Canada Certification necessary?
 

A. In addition to Cyber Essentials Canada being a prerequisite to an expanding number of business opportunities, it provides a valuable audit of your current information system practices.

 

Displaying the Cyber Essentials Canada badge on your website and within your collateral will also provide reassurance to your customers and other stakeholders that you have robust cybersecurity measures in place.

 

 

Back to top

 

 

 
Q. What if my IT infrastructure is handled by a third-party provider?
 
A. Verify with your provider if they are Cyber Essentials Canada certified. If they are not, you should direct them to get certified. However, your provider does not need to be Cyber Essentials Canada certified for you to become certified. You can always contact us with your provider’s details, and our expert team will contact your provider to discuss the next steps. Contact us now.  

 

Back to top

 
 
 
Q. What kinds of attacks does Cyber Essentials Canada protect me from?
 
A. According to Lancaster University's study on Cybersecurity Control's Effectiveness, by implementing Cyber Essentials Canada framework, organizations are mitigating against 80% plus of common internet threats.  

 

Back to top

 

 

 
Q. What happens if a Cyber Essentials/Cyber Essentials Canada Plus certified company suffers a breach?
 
A. Cyber Essentials Canada will not protect against all attacks. It will help prevent approximately 80% of common online cyber threats. If you do experience a breach, we recommend contacting the RCMP. Keep in mind that, under various Acts and Regulations, cybersecurity certification is a form of due diligence, so you can rest easy if you are certified.   

 

Back to top

 
 
 
Q. What types of companies can be Cyber Essentials Canada certified?
 

A. All companies should apply for certification, especially those already operating in, or selling goods or services to regulated industries (e.g. electronics manufacturing, health, defence, etc.) In addition, Cyber Essentials Canada is a prerequisite to an expanding number of business opportunities, while also providing a valuable audit of your current information system practices.

 

Displaying the Cyber Essentials Canada badge on your website and within your collateral will provide reassurance to your customers and other stakeholders that you have robust cybersecurity measures in place.

 

 

Back to top

 
 
 
Q. Should I get Cyber Essentials Canada Basic or Cyber Essentials Canada Plus certified?
 

A. First you must decide on the level of assurance you would like to implement. Cyber Essentials Basic provides policy driven assurance, whereas Cyber Essentials Canada Plus requires a vulnerability scan of your network to ensure the organization is not susceptible to high risk or critical vulnerabilities. For more information on what each certification offers, visit here. 

 

Depending on the industry you operate in, you may be required to achieve Plus-level certification. Cyber Essentials Canada Basic and Cyber Essentials Canada Plus could be prerequisites to an expanding number of business opportunities. 

 

 

Back to top

 

 

 
Q. What evidence is required to become Cyber Essentials Canada certified?
 
A. The requirements for Cyber Essentials Canada can be found here  

 

Back to top

 

 

 
Q. What happens if my organization doesn't meet the Cyber Essentials Canada requirements?
 

A. If you haven't met all requirements, the Certification Body will provide you with a report outlining the gaps and will include recommended action steps to address those gaps. You will then have 30 days to examine your report and to adjust or provide clarification or additional information to meet the Cyber Essentials Canada requirements. 

 

We will re-assess at no extra charge within that 30-day timeframe. If you still fail after these 30 days, you will need to re-apply and will incur the assessment fee again.

 

 

Back to top

 

 

 
Q. How long does the certification process take?
 

A. Certification time frame largely depends on how long it takes the customer organization to complete The Cyber Highway Journey Statements, including any required evidence. Once that is complete it next depends on the availability of the selected Certification Body. 

 

On average, the Cyber Essentials Canada certification should take about 30-60 days to achieve. 

 

 

Back to top

 

 

 
Q. Will I be provided support during the certification process?
 

A. During the certification process you will be assigned a member of the Cyber Essentials Canada Customer Success Team. The Customer Success Team will be accessible to answer all your questions, provide you with resources, and connect you with accredited service providers who offer fee-based services. 

 

Your assigned Customer Success Team member is there to provide in depth assistance to achieve certification. Meet our Customer Success Team.

 

 

Back to top

 

 

 
Q. How do I keep my Cyber Essentials Canada certification up to date?
 

A. If you make any changes to your security, e.g. updating your policies, or implementing new hardware or software, we recommend you regularly update these changes on The Cyber Highway. You may do so using your account on https://www.thecyberhighway.ca/. Regularly updating these changes will save you time when you re-certify.
 

An annual re-assessment will confirm that your organization remains protected and maintains the Cyber Essentials Canada certification benchmark. Certified cloud solutions also help take the worry out of maintaining certification for you.

 

 

Back to top

 

 

 
Q. What is The Cyber Highway?
 
A. The Cyber Highway is the secure online platform customers will use to submit their application for certification. Click here for more information.  

 

Back to top

 

 

 
Q. What happens when my account on The Cyber Highway expires?
 
A. You will no longer have access to The Cyber Highway. You have the option of renewal of the subscription. However, if you do not renew within 3 months, the stored data will be destroyed.  

 

Back to top

 


If you have an inquiry that is not listed here, please contact us. A member of our Customer Success Team would be happy to answer any questions or concerns you may have.

 

CONTACT US

 

Cyber Essentials PLUS Program Logo

View our Certification Options 

VIEW PLANS