Open source and Cyber Essentials Plus

“What if you wanted to run open source software, but gain or maintain Cyber Essentials Plus?”

That was an interesting question. Especially in the context of having potential alternatives to Big Player software. My initial thought was surely it’d be bloody painful and just not worth it?

NCSC seem to be aware and are developing something called Cyber Essentials ‘Pathways’. I’d never heard of it so - interesting.

Introduction:

Pathways: exploring a new way to achieve Cyber Essentials certification

For large, complex firms struggling with the prescriptiveness of Cyber Essentials, ‘Pathways’ will provide a new route to certification.

Follow-up:

Cyber Essentials ‘Pathways’: From experiment to proof of concept

We are encouraging large organisations to help us develop an alternative route to certification.

Early stages. But one to watch if you have a more complex environment.