5-control triage
Cyber Essentials readiness check.
A fast triage, not an official assessment. It helps identify where to look before paying for certification.
01Firewalls
Have internet-connected devices and network boundaries been configured to restrict unnecessary inbound access?
02Secure configuration
Have default accounts/settings been addressed and unnecessary software/services reduced?
03Security update management
Are supported operating systems/apps tracked and security updates deployed within current scheme requirements?
04User access control
Are accounts limited to what people need, admin rights controlled, and MFA used where required?
05Malware protection
Is appropriate malware protection, application allow-listing or equivalent protection in place?
Use the current NCSC Requirements for IT Infrastructure (v3.3) for authoritative requirements.