Assurance Programs

PCI-DSS
Cyber Essentials
NIST

Vulnerability Management

Penetration Testing
Network Scans

Responsible Disclosure

Responsible Disclosure Policy
Home Page / Cyber Essentials

Cyber Essentials

What is the purpose of this initiative?

Cyber Essentials is a National Cyber Security Center (UK government) backed security assessment that helps organizations achieve readiness to protect against common cyber attacks. The Information Assurance for Small and Medium Enterprises Consortium (IASME) certifies Cyber Essentials readiness.

What is the scope?

OverDrive is a Cyber Essentials certified business. The scope of IASME's Cyber Essentials certification evaluation includes the following domains:

  • Managing Security
  • Information Assets
  • Cloud Services
  • Risk Management
  • Data Protection
  • People
  • Security Policy
  • Physical and Environmental
  • Firewalls and Internet Gateways
  • Secure Configuration
  • Patches and Updates
  • Operations and Management
  • User Accounts
  • Administrative Access
  • Malware Protection
  • Vulnerability Scanning
  • Monitoring
  • Backup and Restore
  • Incident Management
  • Business Continuity

How often are you evaluated?

Cyber Essentials evaluations are annual. All current Cyber Essentials certificates can be verified using the search available on IASME's website.

Who is the primary audience?

Anyone that requires a Cyber Essentials certification, or similar certification, as part of their review of OverDrive's security readiness.

Certificate

Cyber-Essentials-certificate-2024-03-14.png