PlatformWhy NaqFrameworksPartnersIntegrationsResources

Cyber Essentials with Naq

Prove you are protected against common cyber attacks.

Many customers, and many government contracts, ask for Cyber Essentials before they work with you. Naq sets up most of the work for you, then checks your evidence every night.

Cyber Essentials with Naq walkthrough video

Cyber Essentials with Naq, a three-minute walkthrough of the product · Narrated, with captions

What is Cyber Essentials?

Cyber Essentials is a UK government-backed scheme that protects you against the most common cyber attacks. You complete a self-assessment, and a certification body checks it.

5 controls

Firewalls, secure configuration, security updates, user access control and malware protection.

14 days

How quickly you must apply critical security updates. Multi-factor sign-in is also required on every cloud service that offers it.

12 months

How long a certificate lasts, so you renew it every year.

Five steps to certification, most of them done for you.

This is everything Cyber Essentials asks of you. For each step, here is what you do and what Naq does.

Step
1

Decide what the certificate covers

You

Write down what your certificate covers, and what it leaves out.

Naq

Sets up Cyber Essentials for your whole organisation, with 58 requirements linked to 20 ready-made controls.

No spreadsheet to build
Step
2

List your devices, cloud services and users

You

Connect Google Workspace or Microsoft 365.

Naq

Finds your devices and cloud services, and shows who uses each one and whether multi-factor sign-in is on.

Gaps found for you
Step
3

Approve your security policies

You

Review the policies, approve them, and send them to all staff.

Naq

Gives you 13 ready-written Cyber Essentials templates, from network security to secure configuration, and tracks who has acknowledged each one.

No blank pages
Step
4

Prove that five technical controls are in place

You

Fix each gap that Naq shows you.

Naq

Links your registers and evidence to each control and checks them every night. Each gap comes with the exact record to fix.

The exact record to fix
Step
5

Pass the assessment, every year

You

Answer the questionnaire, then add your certificate with its expiry date.

Naq

The Naq Assistant tells you what is still missing first, and Naq reminds you when the certificate is due for renewal.

No missed renewal
Then, prove it

Checked every night, not once a year.

Naq links your registers and evidence to the right controls and checks them every night. Someone who has left but still has access is flagged before an assessor finds it.

Your Cyber Essentials checks
1 to fix
Run every night on your registers and evidence

Your registers

Checks

  • Every vendor account has MFA turned on
  • Some people who have left still have vendor access 1 record to fix
  • Every managed device reports disk encryption
  • Every device is under endpoint management

Cyber Essentials certificate

Upload

  • Cyber Essentials certificate is in date
  • Evidence is current and within its validity period
Last checked today, 02:00

Real checks from the Cyber Essentials controls in Naq. The results shown are illustrative.

Trust Centre

Show customers, before they ask.

Publish your Cyber Essentials controls and documents on your own Trust Centre. Customers answer their own questions, so their security questionnaires get shorter.

1
Customers filter your controls to Cyber Essentials

They see which controls are in place, without a call or a spreadsheet.

2
They request a restricted document

For example your access control policy, with their name and the reason they need it.

3
You approve the request

Naq emails them a link straight away.

58 requirements

  • Scope 21
  • Firewalls 7
  • Secure configuration 9
  • Security update management 4
  • User access control 12
  • Malware protection 3
  • Backing up your data 1
  • Further guidance 1

Mapped to the Cyber Essentials requirements, version 3.3.

20 ready-made controls

  • Cyber Essentials Scope Definition
  • Perimeter Firewall and Default-Deny
  • Secure Configuration and Software Installation
  • Patch Management
  • Supported Software Management
  • Multi-Factor Authentication
  • Identity Lifecycle (Joiner/Mover/Leaver)
  • Privileged Access Management
  • Malware Protection

And 11 more.

13 ready-written templates

  • Information Security Policy
  • Network Security Policy
  • Secure Configuration and Hardening Policy
  • Access Control Policy
  • Anti-Malware Standard
  • Acceptable Use Policy
  • Remote Working Policy
  • Workstation Use and Security Standard
  • BYOD and Mobile Device Policy

And 4 more.

Every document you link as evidence is also checked automatically: its current version must be approved, staff acknowledgements must be complete, and its review date must not have passed.

Built from the Naq control library for Cyber Essentials v3.3.

Get ready for Cyber Essentialswith Naq.

See the five steps in your own workspace, with your own data.