National Records of Scotland (NRS) has achieved Cyber Essentials Certification

National Records of Scotland (NRS) are delighted to announce we have achieved Cyber Essentials certification.

Jointly developed by the UK Government and the Cyber Security industry, the Cyber Essentials scheme outlines the cyber security controls organisations need to implement to help mitigate risks from common internet based threats.

Cyber Essentials certification is awarded to those organisations who meet the strict Cyber Essentials scheme’s security requirements.

 Cyber Essentials concentrates on five key areas:

• Strong access controls to data and services
• Effective patch management to ensure devices and software are up-to-date
• Robust processes are in place to protect against malware and viruses
• Confidence in the secure configuration of devices used within our organisation
• Secure internet connections via managed boundary firewalls and internet gateways

 The NRS Cyber Essentials certificate (708 KB PDF) demonstrates our commitment to continuous security improvement and provides a level of external independent assurance that NRS are doing the right things to help protect our customers, the systems and services we deliver and the data we are trusted to hold.

By achieving Cyber Essentials certification we are also letting our customers, partners and stakeholders know that:

• NRS takes cyber security seriously and meets the Government backed standard
• NRS has robust security measures in place to protect against internet based threats

As an organisation, NRS is committed to evolving our organisations cyber security posture to ensure it matures to align with the continually changing technological landscape.  With this in mind, NRS is taking active steps toward achieving Cyber Essentials Plus, which is a more advanced Cyber Essentials certification, in the coming months and we will let you know when this new certification has been achieved.