All Things Web® – Cyber Essentials Case Study

Absolutely PC helps marketing agency achieve Cyber Essentials certification.

About All Things Web®

Established in 2001, All Things Web® is a marketing agency based in the Cotswolds that offers a range of marketing services to businesses with flexible delivery options including outsourced, consultancy and tailored training.

Given the nature of their work, ATW handles confidential client data including logins to their website, social media channels, advertising accounts and billing information including card details.

Client Requirements

As part of their ongoing commitment to improving the cyber security of their business, ATW wanted to become Cyber Essentials certified to protect against the most common types of cyber attack.

In addition to making the business more cyber secure, the Cyber Essentials certification would provide benefits including consideration for government tenders, free cyber insurance, and staff development.

As their outsourced managed IT provider, we were well placed to support ATW with the certification, working in partnership with their team to guide them through every stage of the Cyber Essentials process. 

The Cyber Essentials Process

To achieve NCSC Cyber Essentials certified status, ATW was assessed against 5 security controls which we worked to ensure were up to the required standard. The 5 controls are:

N

Firewalls – Ensuring that every device being used by staff for business purposes was protected by a correctly configured firewall.

N

Secure Configuration – Putting controls and processes in place for computers, network devices and password-based authentication such as the implementation of a password policy and removing unnecessary user accounts.

N

User Access Controls – Reviewing and ensuring ATW was in control of the user accounts and understood the access privileges each user had.

N

Malware Protection – Ensuring that the business had appropriate mechanisms in place to protect against malware.

N

Security Update Management – Updating all software to the latest version and ensuring that any mobile devices used to access business data were not jailbroken and were running the latest version of Android or iOS.

Once the updates had been made and processes had been put in place to pass the 5 security controls, a self-assessment form was submitted for the business which was then verified by a third party.

During this process, it was flagged that one of the mobile devices being used by ATW was not using up to date software. Once this was rectified, the submission was completed and ATW were issued their Cyber Essentials certificate of assurance.

Following their certification, ATW were sent the information to take advantage of the free £25,000 of complimentary cyber insurance that came with the certification.

Conclusion

After ATW provided all the information to start the certification, it took just 2 weeks for the business to become Cyber Essentials certified.

The staff at ATW now understand the most common causes of cyber attacks and have measures in place to protect against them, providing peace of mind for customers. 

Helen Moloney, Managing Director of ATW was delighted to have achieved Cyber Essentials certification for the business through Absolutely PC.

“As part of our ongoing commitment to cyber security, we saw the importance of achieving Cyber Essentials certification for our existing clients as well as suppliers and prospective new clients.”

“The team at Absolutely PC managed the whole process on our behalf, working with our team via shared documents to enable us to upload results directly to the cloud for Absolutely PC to review instantly.”

“The whole process was made simple by the jargon-free support from the Absolutely PC team and the small issue that was identified was fixed quickly. We would recommend Absolutely PC to anyone looking to get Cyber Essentials certified.”

Helen Moloney, Managing Director – All Things Web®

Get Cyber Essentials Certified

If your business is becoming more reliant on digital products and services, cyber security should be high on your agenda.

Ensuring your own and your client’s data is protected against the most common forms of cyber attack prevents the risk of a breach which can be extremely costly and do severe reputational damage to your business.

To find out more about getting Cyber Essentials certified with Absolutely PC, give us a call today on 0117 975 9523 or fill out the form below and one of our team will get back to you.

APPROACH

How We Work With You

TESTIMONIALS

What People Are Saying

We would like to say a big thank you to John and his team for all the help you have given to our business over the years. Great service combined with great expertise. Couldn’t recommend you all enough.

Helen Moloney

I have been using John and his team’s IT support for many years in various businesses. They are always full of good ideas, pick up the phone and act quickly. You are never too small a business to have IT support at the end of a phone !

Alli Gay

Absolutely PC are a brilliant company to work with. Arthur David have worked with them for a number of years. They have a professional team of people, who are very knowledgeable and nothing is too much trouble.

Beth Tuck

Excellent service, I have been using Absolutely PC for the last few years now and would highly recommend them, nothing is too much hassle for them, 5 Stars,
Baz, TR Film & TV Scaffolding Service’s

Darren Ingram

We're Here To Help!

Fill in the form, send us an enquiry today

Business Cyber Safety Check

Question AreaYour Answer
Firewall Protection
Do all your computers and servers have firewall protection turned on?
Firewall Rules Kept Tight
Do you regularly review what is allowed through your firewall (and remove anything you don’t need)?
Confidence in Security
Do you feel confident your business is protected from common cyber threats?
Staff Training
Has anyone in your company had cyber security training recently?
Reporting Suspicious Emails
Do your staff know what to do if they receive a suspicious email?
Strong, Unique Passwords
Do your staff use strong, unique passwords for work accounts?
Default Passwords Changed
Have default passwords been changed on your internet router, Wi‑Fi, devices, and any key systems?
Extra Login Protection (MFA)
Do you use an extra security step when logging in (like a code on your phone)?
Admin Accounts Kept Separate
Do you keep admin (high power) accounts separate from everyday user accounts?
Starting/Leaving Access Process
Do you have a process for removing access when someone leaves the company?
Access Limited to What’s Needed
Do people only have access to the data and systems they actually need for their job?
No Shared Logins
Are shared accounts used across the business (one login used by multiple people)?
Automatic Updates
Are all your computers and devices kept up to date automatically?
Important Updates Applied Quickly
When important security updates are released, are they applied quickly (within a couple of weeks)?
Supported Systems Only
Are all your computers and servers on supported versions (not old/out of support)?
Apps Kept Up to Date
Are your main apps updated regularly (and old software removed)?
Control Over Installing Software
Are staff allowed to install their own apps or software?
Security Software Installed
Do you have antivirus or security software on all work devices (including servers)?
Security Being Watched
Do you know if your antivirus is actively monitored, or is it just installed?
Real-Time Protection On
Is your antivirus protection always on (and not easy for users to turn off)?
Security Updates Automatic
Is your security software kept up to date automatically?
Coverage for Remote Devices
Are devices used at home or remotely covered by the same protection?
Scams Being Reported
Have you had any suspicious emails or scams reported lately?
Spotting Scam Emails
Do staff know how to spot a scam or phishing email?
If Someone Clicks a Bad Link
Do staff have a process to follow if they accidentally click on a suspicious link?
Where Important Data Lives
Is your important business data stored securely?
Backups in Place
Is your data regularly backed up?
Backups Can Be Restored
Do you know how quickly you could recover your data if something went wrong?
Remote Working
Do staff work from home or on the move?
Personal Devices Used for Work
Are personal devices used for work (email, files, systems)?
Remote Access Protected
Are remote devices and remote access secured?
Plan for When Things Go Wrong
Do you have a plan if something goes wrong (like a hacked account or ransomware)?
Incident Response Plan
Do you have an incident response plan in place should you have a cyber incident?
Plan Has Been Tested
Have you ever tested your response plan (even as a simple discussion)?
External Access to Systems
Do any external companies have access to your systems or data?
Checking Suppliers’ Security
Do you check a supplier’s security before giving them access?
Security Standards Goal
Are you aiming to meet any standards like Cyber Essentials or ISO 27001?

Office

Unit 1, Grove Industrial Estate, Gloucester Rd, Patchway, Bristol BS34 5BB

Opening Hours

Mon - Fri - 8am - 5.30pm
Sat/Sun - Closed

Call Us

0117 9759 523