{"id":3796,"date":"2025-04-11T15:46:04","date_gmt":"2025-04-11T14:46:04","guid":{"rendered":"https:\/\/cwsisecurity.com\/?p=3796"},"modified":"2026-05-04T12:59:40","modified_gmt":"2026-05-04T11:59:40","slug":"whats-new-for-cyber-essentials-2025","status":"publish","type":"post","link":"https:\/\/cwsisecurity.com\/fr\/whats-new-for-cyber-essentials-2025\/","title":{"rendered":"What\u2019s New for Cyber Essentials 2025"},"content":{"rendered":"\n
\n
\n

What is Cyber Essentials?<\/h2>\n\n\n\n
<\/div>\n\n\n\n

Cyber Essentials is a government-backed certification that equips organisations with the core controls needed to defend against today\u2019s most common cyber threats.<\/p>\n\n\n\n

It is recommended by the NCSC that Cyber Essentials<\/a> represents the minimum standard of cyber security for all organisations.<\/p>\n<\/div>\n\n\n\n

\n
\"\"<\/figure>\n<\/div>\n<\/div>\n\n\n\n
<\/div>\n\n\n\n

Who Should Follow Cyber Essentials?<\/h2>\n\n\n\n
<\/div>\n\n\n\n

Every organisation, from micro businesses to large corporations, should follow Cyber Essentials as no organisation is exempt from a cyber-attack.<\/p>\n\n\n\n

<\/div>\n\n\n\n

Cyber Essential 2025 Updates<\/h2>\n
<\/div>\n

To stay relevant and effective in an evolving threat landscape, Cyber Essentials must continue to evolve. The April 2025 IT Infrastructure updates in version 3.2 are designed to do just that, addressing vulnerabilities in outdated security practices, such as traditional password-based authentication, and aligning with modern working patterns like remote and hybrid work. These changes also broaden the scope of acceptable remediation methods and reinforce the certification process itself, ensuring that it carries greater credibility and impact.<\/p>\n\n\n\n

<\/div>\n\n\n\n

A Breakdown to the Latest Cyber Essentials Updates<\/h2>\n\n\n\n
<\/div>\n\n\n\n

Passwordless Authentication<\/mark><\/h3>\n\n\n\n
<\/div>\n\n\n\n

The 2025 Cyber Essentials update builds on the 2022 multi-factor authentication requirement by formally embracing passwordless authentication – a more secure and user-friendly approach that eliminates the need for traditional passwords altogether.<\/p>\n\n\n\n

Instead of relying on a single, often weak, password, passwordless systems use multiple authentication factors such as biometrics, cryptographic keys, and one-time codes to verify user identity. Even without a password, these systems maintain robust security through behind-the-scenes technologies like digital certificates and secure authentication protocols.<\/p>\n\n\n\n

Common examples of passwordless authentication methods include:<\/p>\n\n\n\n

\n
\n