Cyber essentials training (FOI)

Request

Can you please confirm if the Government of Jersey have completed and achieved full Cyber Essentials status for the entire organisation and if not why not?

Response

As part of improving third party risk management, the Government of Jersey implemented a requirement for suppliers to have a Cyber Essentials status going forward. Please note that suppliers are required, where appropriate, to have the more detailed level of ISO27001 certification.

A number of areas across the Government were selected to achieve Cyber Essentials status, which was gained in these cases. Having identified that the necessary infrastructure and controls were in place to achieve this status it was not felt to be of added value to roll this out across the entire organisation. Focus was instead switched to delivery of the Cyber (Major Project) as set out in the Government Plan 2020-2023.