voestalpine Metsec plc

< Return to overview

Cyber Essentials Certification

With Cyber Essentials certification now being a prerequisite for supply to many public sector projects, Metsec decided to undergo assessment according to the scheme’s requirements as the introduction.

Cyber Essentials is designed to help organisations guard against cyber attacks, including malware, ransomware and phishing, the consequences of which can have far-reaching implications for the organisation itself as well as other organisations and individuals with whom it has dealings.

The scheme proposes five key areas of control which are designed to prevent cyber attacks; firewalls to secure internet connections, security settings for devices and software, controlling access to data and services, protection from viruses and malware and software updates.

As the company’s Sales Director of Framing, Chris Holleron, explains, the initiative has benefits to both private and public sector customers: “Cyber Essentials is not just about ticking boxes to guarantee consideration on public sector projects. It adds another layer of assurance for all Metsec customers who can be confident that our data and that which we hold on their behalf is as secure as it can be, and that we take this security very seriously.

“Even with ISO 27001 accreditation, we were not guaranteed certification under the scheme. We still had to make one or two adjustments to our procedures for software updates to assure success.”

In line with all of the company’s operations, Metsec’s information security systems are backed by extensive insurance policies covering employer, professional, public and product liability.