Cyber Essentials

Certified, and independently checked

If you're assessing UserChecks as a supplier, you'll want evidence rather than assurances. Riccom Ltd holds Cyber Essentials certification, issued by The IASME Consortium Ltd — the National Cyber Security Centre's delivery partner for the scheme.

Cyber Essentials is a UK Government-backed scheme run by the NCSC. Certification means we have been assessed against its five technical controls and met the requirements at the time of assessment. It sits alongside the commitments in our Privacy Policy and GDPR & Data Protection pages.

What Cyber Essentials covers

The scheme assesses five technical controls — the basics that stop the large majority of common internet-borne attacks:

• Firewalls — controlling what can reach our systems from the internet, and what those systems can reach out to.
• Secure configuration — devices and services set up to reduce unnecessary exposure, with default accounts and unused functionality removed.
• Security update management — supported software, kept patched, with high-risk updates applied promptly.
• User access control — accounts issued to named people, with the minimum access needed for the job and separate administrative accounts.
• Malware protection — devices protected against malicious software.

Riccom holds Cyber Essentials at the standard level. That is a verified self-assessment against those five controls; it is not Cyber Essentials Plus, which adds a hands-on technical audit. Certification is a snapshot of our controls at assessment, not a guarantee against every form of attack — no certification is.

What is Cyber Essentials?

Certificate details

Cyber Essentials certificates are valid for 12 months, after which the assessment is taken again.

Verify it yourself

Our certificate is published on the Blockmark registry, where you can confirm it independently rather than take our word for it.

View our certificate on the Blockmark registry

Questions?

If your procurement or security team needs anything further — a copy of the certificate for your supplier records, or detail on how we handle your data — get in touch and we'll answer.