Cyber Essentials Plus Internal Retest

Test requirements

• All user devices are subject to testing and will be agreed upon before the testing date, including mobiles, servers and BYOD (bring your own device), and must be available for testing.
• All devices within the scope of testing must be in use user devices and cannot be built specifically for testing.
• A genuine local user account with username and password must be available for each user in scope.
• Devices must have Internet access and, allow emails from our test domain.
• You must provide details of a user email account for each user being assessed.
• Workstation builds must be configured to allow an authenticated vulnerability scan that will determine patch and version numbers of installed software, and you must provide details of the user account to be used.
• Remote registry must be enabled on the workstation builds, and no global policies that block the authenticated vulnerability scan are permitted.

Conditions

• This product is supplementary to the Cyber Essentials Plus certification service provided by IT Governance.
• This product cannot be purchased unless the Cyber Essentials Plus certification service is being provided by IT Governance.
• Each retest package includes testing at one location of one type of user account, for up to ten sample devices. One location refers to one physical office/site or all devices/machines selected for testing being on the same network. Additional workstations, mobile devices and build types may need to be tested to meet the sampling requirements of the scheme. If you require more than ten end-user workstations to be tested, you will need to purchase Cyber Essentials Plus Certification – Additional Device Testing. This testing will usually be conducted remotely.