PGI - PROTECTION GROUP INTERNATIONAL LTD.

Cyber Essentials Plus Certification Services

PGI is a leading provider of the government-backed Cyber Essentials and Cyber Essentials Plus certification scheme, helping hundreds of businesses across the UK to improve their processes and demonstrate a commitment to cybersecurity.

PGI Information Assurance experts can assist your organisation in gaining and maintaining Cyber Essentials certification.

Features

• Self-Assessment questionnaire (SAQ) Review
• Overview of the Cyber Essentials+ process and requirements
• Establish whether adequate policy and processes are implemented
• Identify security controls, malware protection are to appropriate standards
• External Assessment - Remote and on-site vulnerability testing
• Internal workstation Assessment and tests on mobile devices
• Gap Analysis Report and Action Plan
• Cyber Essentials Basic and Plus Final Report

Benefits

• Higher level of security assurance for internal and external stakeholders
• Validation of your controls completed by an experienced security consultant
• Single Point of Contact Testers are Cyber Essentials Qualified Assessors
• Action Plan to follow to meet the Cyber Essentials+ requirements
• Government portal set-up support

£2,000 to £4,200 a unit

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bidteam@pgitl.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

339159758157146

Contact

Mike Tipson
020 4566 6600
bidteam@pgitl.com

Planning

• Planning service: Yes
• How the planning service works: For Cyber Essentials, PGI will work closely with the client to review the; Self-assessment questionnaire focused on your policies and procedures and security measures of your external-facing services (e.g. your website and emails).; ; Basic Cyber Essentials, plus:; An independent, onsite vulnerability assessment and review of key security controls, including email and web, user endpoints and mobile devices.; ; Cyber Essentials Plus is a highly regarded certification, suitable for small and large businesses that are looking for a real improvement in their existing cybersecurity controls. It provides the same benefits of the basic Cyber Essentials, with two important additional benefits:; ; External validation of your controls completed by an experienced security consultant.; Higher level of security assurance for internal and external stakeholders, including:; The supply chain; Insurance providers; IT/security staff; Board level management; ; Regardless of the certification you’re applying for, we’ll work with you to ensure you achieve success. We offer two affordable Cyber Essentials options, with no hidden costs.
• Planning service works with specific services: No

Training

• Training service provided: Yes
• How the training service works: PGI’s Information Assurance Team, in conjunction with our operational red and blue teams, provides training relating to Cyber Security Awareness (1 day) and Cyber Security Fundamentals (2 days). Our experienced consultants provide real life scenarios and demonstrations covering a range of information security topics, including phishing. The courses delve into the threat actors and their motivations for launching phishing attacks, and also look at how organisations can help protect themselves through continued vigilance and education. These courses do not only cover phishing, but all aspects of Information Security. However, bespoke courses or one to one training for users could be developed if required. PGI’s operational trainers are qualified, relied upon and have worked for organisations in critical national infrastructure, government, corporate, charity and small-to-medium enterprises to help restore their systems which adds significant value to delivery of training, contextualised through real-life scenarios.
• Training is tied to specific services: No

Setup and migration

• Setup or migration service available: Yes
• How the setup or migration service works: PGI would work with our clients to understand their requirements and to help them determine the most appropriate location for the services they wish to provide. These could be a blend of remote and hosted on premise, and PGI will work with the client to ensure that all appropriate security measures are considered.
• Setup or migration service is for specific cloud services: No

Quality assurance and performance testing

• Quality assurance and performance testing service: Yes
• How the quality assurance and performance testing works: In a similar manner to Business Continuity, other standards and certification accreditation services that we offer, PGI would work with the client to test and refine the various process related to successfully achieve and maintain Cyber Essentials or Cyber Essential Plus certification.; ; The Cyber Essentials Plus verification process comprises of remote and on-site vulnerability testing to assess whether basic security controls have been successfully implemented.; This provides external validation of the controls effectiveness and as such is more rigorous than the Cyber Essentials basics self-certification approach.

Security testing

• Security services: Yes
• Security services type:
  • Security strategy
  • Security risk management
  • Security design
  • Cyber security consultancy
  • Security testing
  • Security incident management
  • Security audit services
• Certified security testers: Yes
• Security testing certifications:
  • CREST
  • Cyber Scheme
  • Other
• Other security testing certifications:
  • Cyber Essential Plus Certified Assessors
  • CompTIA Network+
  • CompTIA Security+
  • CompTIA Advanced Security Practitioner
  • Certified Information Systems Security Professional
  • Certified Information Security Manager
  • Microsoft Certified Security Engineer
  • Certified Ethical Hacker

Ongoing support

• Ongoing support service: Yes
• Types of service supported: Hosting or software provided by a third-party organisation
• How the support service works: PGI are happy to provide ongoing support to organisations, either in developing compliant practices or in maintaining them on a continuous basis. This may be achieved by providing resource regularly on site, or could be through remote support and conference calls, depending on client requirements.

Service scope

• Service constraints: PGI have no constraints on the services we provide. Work can be carried out on site or remotely, depending on client requirements.

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Responses will normally be within one working day, unless in the middle of an incident / project when response times will usually be quicker. Weekend response times may be different, depending on contractual requirements.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Support levels: Support levels would be agreed on a project by project basis. Cost for support will be determined based on client requirements. Typically each client will be assigned a lead contact, who may be one of PGI's consultants or may be part of the sales team. This will depend on the nature of the project being undertaken.

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Security Clearance (SC)

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Assessment Bureau
• ISO/IEC 27001 accreditation date: 28/04/2022
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications:
  • CREST
  • ISO 27001

Social Value

• Social Value:

  Social Value

  • Equal opportunity
  • Wellbeing

  Equal opportunity

  Equal opportunity; ; PGI is an equal opportunity employer, with a strong focus on Diversity, Equity and Inclusion.

  Wellbeing

  Wellbeing; ; PGI provides staff with support across mental and physical health.

Pricing

• Price: £2,000 to £4,200 a unit
• Discount for educational organisations: Yes

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bidteam@pgitl.com. Tell them what format you need. It will help if you say what assistive technology you use.