Cyber Essentials Changes from 27 April 2026: What’s Really Different?

From 27 April 2026, the UK Cyber Essentials scheme moves to Requirements for IT Infrastructure v3.3 (Danzell), applying to all new assessment accounts created on or after this date. While the five core control areas remain unchanged (firewalls, secure configuration, access control, patching, and malware protection), the update significantly tightens how these controls are interpreted, […]
Third Party Risk Management: A Practical Guide to Assessing Vendor Security

Third‑Party Risk Management: A Practical Guide to Assessing Vendor Security Organisations pour significant resources into protecting their own systems deploying firewalls, tightening identity controls, and rehearsing incident response plans. Yet many of the most damaging breaches don’t originate inside the organisation at all. They begin with a trusted external partner. Modern businesses rely on an […]