GB-London: Measuring the effectiveness of Cyber Essentials

To protect the UK's economic well-being we need to reduce the harm of cyber-attacks and make it easier for organisations to exploit the opportunities of the global digital economy.

In order to determine whether Cyber Essentials, and the measures contained within it aimed at increasing the cyber resilience of an organisation, has a measurable benefit to both organisations and the economy, an evaluation of the scheme's effectiveness is required.

A methodology study is therefore being commissioned to investigate the potential approach to measuring the benefit to an organisation (in terms of improved resilience/ business continuity, commercial and reputational benefit etc) of having Cyber Essentials accreditation.

This study will also identify how an evaluation should be implemented, including the data to be collected, the type of analysis and what results will be produced from this and expected resource requirements.

A separate commission will then take place to conduct the full evaluation (utilising the methodology determined through this contract), likely to start in the 2018/19 financial year.

This research will focus on a methodology study to identify the best approach to measuring the benefits of the Cyber Essentials requirements, and separately any benefits of being certified to demonstrate the level of security to customers and suppliers.