Basic Cyber Hygiene: Does It Work?

Jose Such, Pierre Ciholas, Awais Rashid, John Vidler, Timothy Seabrook

Research output: Contribution to journalArticle (Academic Journal)peer-review

16 Citations (Scopus)


The resources required to establish and maintain cyber security often results in Small and Medium Enterprises (SMEs) being left unprotected, risking not just their own but also the supply chain of other larger organisations. A number of security certifications for SMEs have been proposed, but how effective are these schemes? We conducted the first effectiveness evaluation of one such scheme, Cyber Essentials, and found that its security controls seem to work well to mitigate the threats they were designed for, i.e.,
those threats exploiting vulnerabilities remotely with commodity-level tools. The results may also be applicable to other schemes for SMEs around the globe that share/include the same security controls.
Original languageEnglish
Pages (from-to)21-31
Issue number4
Publication statusPublished - 16 Apr 2019

Bibliographical note

The acceptance date for this record is provisional and based upon the month of publication for the article.

Structured keywords

  • Cyber Security


Dive into the research topics of 'Basic Cyber Hygiene: Does It Work?'. Together they form a unique fingerprint.

Cite this