The UK Gov Cyber Essentials Scheme

https://www.cyberessentials.ncsc.gov.uk/

The government says Cyber Essentials helps your business to guard against the most common cyber threats and demonstrate your commitment to cyber security

Self-Help for Cyber Essentials

The guide explains how to:

  • Secure your Internet connection
  • Secure your devices and software
  • Control access to your data and services
  • Protect from viruses and other malware
  • Keep your devices and software up to date

The Three levels of engagement

Not everyone has the time or resources needed to develop a full-on cyber security system. So we’ve designed Cyber Essentials has been designed to fit with whatever level of commitment you are able to sustain. There are three levels of engagement:

  1. The simplest is to familiarise yourself with cyber security terminology, gaining enough knowledge to begin securing your IT.
  2. Basic Cyber Essentials certification.
  3. Cyber Essentials Plus certification.

1.     Self Help

The self-assessment option gives you protection against a wide variety of the most common cyber attacks. This is important because vulnerability to simple attacks can mark you out as target for more in-depth unwanted attention from cyber criminals and others.

2.     Certified Cyber Security

Cyber Essentials Certificate £300 approx. (+VAT)

Certification gives you peace of mind that your defences will protect against the vast majority of common cyber attacks simply because these attacks are looking for targets which do not have the Cyber Essentials technical controls in place.

In the process of obtaining Cyber Essentials Certification is simple, you can opt to buy as much or as little help as you need from the company you choose to certify you.

Cyber Essentials shows you how to address those basics and prevent the most common attacks.

  • Reassure customers that you are working to secure your IT against cyber attack
  • Attract new business with the promise you have cyber security measures in place
  • You have a clear picture of your organisation’s cyber security level
  • Some Government contracts require Cyber Essentials certification

3.     Cyber Essentials Plus Certificate

The cost for this is only available on application.

It has all the benefits of Cyber Essentials PLUS your cyber security is verified by independent experts.

Cyber attacks come in many shapes and sizes, but the vast majority are very basic in nature, carried out by relatively unskilled individuals. They’re the digital equivalent of a thief trying your front door to see if it’s unlocked. The advice is designed to prevent these attacks.

Cyber Essentials Plus still has the Cyber Essentials trademark simplicity of approach, and the protections you need to put in place are the same, but this time the verification of your cyber security is carried out independently by your Certification Body.

The more rigorous nature of the certification may mean you need to buy additional support from your Certification Body.

Cyber Essentials and Government Contracts

If you would like to bid for central government contracts which involve handling sensitive and personal information or the provision of certain technical products and services, you will require Cyber Essentials Certification.

If you’ve enjoyed this post or found it useful then do share – click on the post title then scroll down to the social media share buttons.

Fightback Ninja Signature

Why So Many Fake Blog Comments?

Anyone with a blog or website will be used to ‘people’ posting random meaningless comments on the blog or website and probably wondered why this happens so much. What is the point?

First of all, where do the fake comments come from?

They are computer generated by software that takes a set of generic phrases and rearranges them and then tries to post the result on a long list of random blogs and websites.

So you end up with fake comments such as this one from recently.

“message: We’re so happy having found the web blog, it’s really the thing my wife’s friends My friends from work are hoping in search of. The information here on the web page is always enlightening and will assist my business partners significantly intuitive information. Typically I’m not on the net when I’m busy and as my friends and I get a break.”

Sometimes the posts contain lots of links to websites that the sender will be paid for posting on the Internet and sometimes there are adverts for illegal websites, gambling sites etc.

Most blogs and many websites have a process where the owner has to authorise posts but on very busy sites this isn’t always possible and the sender hopes her post will get published automatically or by someone who cannot be bothered recognising it as rubbish.

Many blogs automatically publish posts from anyone whose first post was accepted. Then they can include more illegal and/or unpleasant adverts and links in their subsequent posts.

Make sure your blog or website is setup so you have to authorise each post and if you are unsure whether a post is genuine then quarantine it or delete it.

If you have any experiences with these scams do let me know, by email.

Fightback Ninja Signature

Phone-Paid Services Authority

https://psauthority.org.uk/

The Phone-Paid Services Authority is the UK regulator for content, goods and services charged to a phone bill.

Phone-paid services are the goods and services that you can buy by charging the cost to your phone bill or pre-pay account. They include directory enquiries, voting on TV talent shows, donating to charity by text, joke lines, chat lines, games or downloading apps on your mobile phone. They are referred to as premium rate services in law.

UK regulation is open, fair and robust, underpinned by a Code of Practice approved by OFCOM.

Ofcom. As the telecoms, internet and payments sectors continue to grow globally at an unprecedented rate, the Phone-paid Services Authority takes action to safeguard consumers and help cutting-edge providers of digital content and services to thrive.

Their vision is a healthy and innovative market in which consumers can charge content, goods and services to their phone bill with confidence.

The Mission of the Phone Pre-Paid Services Authority

To protect consumers from harm in the market, including where necessary through robust enforcement of our Code of Practice and to further their interests through encouraging competition, innovation and growth in the market.

They seek to do this through:

  • Providing clarity about the market for content, goods and services charged to a phone bill
  • Applying an outcomes-based Code of Practice
  • Delivering a balanced approach to regulation
  • Working in partnership with Government and other regulators
  • Delivering high standards of organisational support.

What are Phone-Paid Services and How Do They Charge You?

Phone-paid services is a generic name for goods and services that you purchase and are charged to your telephone bill or pay-as-you-go credit. Here are some examples of phone-paid services:-

  • Quizzes and competitions
  • Voting (e.g. X-Factor, Britain’s Got Talent, Strictly Come Dancing)
  • Charity donations (one-off donations or subscriptions)
  • Digital content (e.g. apps, in-app purchases, digital media,
  • one-off purchases or subscriptions)
  • Directory enquiries (e.g. 118 numbers)
  • Adult services (e.g. chat, dating)
  • Gambling

The job of the Phone Pre-Paid Services Authority is to look after the industry and ensure people are not cheated. But it’s everyone’s responsibility to behave sensibly and that includes not downloading unsafe APPS, checking all payments and not handing over confidential information to unknown people or APPS.

If you’ve enjoyed this post or found it useful then do share – click on the post title then scroll down to the social media share buttons.

Fightback Ninja Signature

Crypto Code Bitcoin Scam

The email says I have had 0.7 of a Bitcoin transferred to my name and I just have to click to accept the payment.

The value of Bitcoins goes up and down dramatically but 0.7 Bitcoins converts to thousands of dollars.

Who wouldn’t want such a windfall?

To accept the transfer you click the link, which does not get you any Bitcoins but rather the website of crypto Code and a sales pitch for their software.

“Unleash The Power Of CryptoCurrency and Earn $15,000 in 24 Hours”

So, it’s just speculation on the price of cryto currencies of which Bitcoin is the most famous.

Is it possible to make lots of money speculating on Bitcoin? Yes. Many people have done so.

But the price can go down just as easily as it can go up and then you lose.

There is a disclaimer at the bottom of the website page

“Trading can generate significant profits but is also highly speculative and involves a high level of risk which can result in partial or full loss of funds”

The email claimed I had Bitcoins transferred to me and that was untrue.

The website claims you can make $15,000 in a day but the disclaimer warns you might lose everything.

Not a good deal to make. For most people it’s safer to choose another investment, but if you’re going to invest in Bitcoin then do your research first and don’t respond to email offers.

Do Share this post on social media – click on the post title then scroll down to the social media share buttons.

Fightback Ninja Signature