Advice for Defence contractors struggling to obtain Cyber Essentials Plus during lockdown

Indelible Data has adapted its assessment model to conduct remote testing to obtain Cyber Essentials Plus during the current crisis but if this is not possible for your company, an alternative option is now available.

The NCSC has issued advice for Defence contractors needing to meet DCPP requirements but struggling to obtain Cyber Essentials Plus Certification due to lock-down and/or isolation restrictions.

Organisations obtaining or renewing CE+ for a future contract will need to provide a Cyber Implementation Plan. This should inform Defence that the supplier is committed to seeking CE+ but cannot do so due to travel restrictions resulting from COVID-19.

In the meantime, the supplier should acquire (or confirm that they will by contract let) acquire the basic level of Cyber Essentials.

Organisations obtaining or renewing CE+ for existing contracts must advise both the relevant Project Team and Commercial Team of the situation.

This situation must be reviewed on a monthly basis. Organisations must resume efforts to acquire CE+ certification once the COVID-19 lockdown is over in a timeframe agreed with the MOD Project or Commercial Team.

Please do get in touch with Indelible Data if you want to discuss your options on 01900 818000 or require assistance to prepare a Cyber Implementation Plan.