CASE STUDY · COACHING PLATFORM · CYBER ESSENTIALS · CUSTOMER DEADLINE
How More Happi achieved Cyber Essentials in about a week to meet an enterprise buyer’s deadline.
More Happi, a B2B coaching platform, was going for a contract with an enterprise buyer that wanted assurance about its security. It had about a week. EJN Labs, a Certification Body licensed by IASME, supported More Happi’s developer through the Cyber Essentials question set and assessed the submission in house. More Happi got there in time.
- Industry
- B2B coaching platform
- Market
- Companies buying coaching for their people
- Service
- Cyber Essentials · assisted
- Engagement
- First Cyber Essentials · customer-driven
- Complexity
- About one week
The challenge.
More Happi is a coaching platform. Companies use it to find and book the right coach for their people, and More Happi provides the coaches. It was going for a contract with an enterprise buyer.
The buyer wanted assurance that More Happi followed good security practice, and certification came up. More Happi had about a week to put Cyber Essentials in place.
There was a second goal. More Happi already followed good practice, and wanted it written down so that it holds for every new joiner.
Why More Happi chose EJN Labs.
More Happi said some of the other providers offered a call the following week. EJN Labs replied at once with a rough estimate and the questions it needed answered, so everyone arrived prepared.
Cyber Essentials was one part of a bigger piece of work. More Happi needed to know the week was realistic before committing to the rest.
More Happi met the assessor who would handle its certification, and knew from the start what would happen.
Two options were offered, assisted or assess only. More Happi took the assisted option, and said working with someone who knew the question set made the difference.
What Cyber Essentials covers.
Cyber Essentials is a UK government-backed scheme. An organisation answers a set of questions about its own IT. A board-level representative or equivalent signs a declaration, and a Certification Body marks the submission. More Happi chose EJN Labs’ assisted option, so the assessor was on hand while its developer worked through the questions on the IASME platform.
- FirewallsBoundary firewalls and internet gateways.
- Secure configurationDevices and software set up to reduce risk.
- Security update managementKeeping devices and software up to date.
- User access controlWho has access to what, including passwords and multi-factor authentication.
- Malware protectionProtection against viruses and other malware.
How the engagement worked.
- FIRST CONTACTEnquire
More Happi got in touch with an urgent deadline. EJN Labs replied with a rough estimate and a questionnaire.
- FIRST MEETINGPlan
The process was outlined, and More Happi met the assessor before delivery began.
- THAT WEEKAnswer
More Happi’s developer worked through the question set, asking as he went. Replies came quickly, including one email answered at 10pm.
- FIRST DRAFTReview
More Happi’s developer sent a first draft. The assessor gave feedback on it almost immediately.
- END OF WEEKCertify
The submission was assessed in time for the deadline.
Results and business impact.
- More Happi put Cyber Essentials in place in about a week, in time for its deadline.
- Good practice the team already followed is now written down as policy.
- More Happi treated the certification as a starting point, not a box to tick.
- The company has a documented baseline for new joiners, and hopes to look at ISO certification in future.
- More Happi says EJN Labs will be its first port of call for future security work.
If I was unsure about anything, I would ask him a question, move on to a different question and get the guidance I needed. He felt like he was always available. I did the first draft, and he gave feedback on that almost immediately. I wouldn’t have been able to complete it so quickly without that engagement and the work he put in.
Check our accreditations yourself.
Do not take our badges on trust. These are the public registers where you can check them.
// READY?
Tell us your deadline.
Tell us your procurement or audit deadline. We’ll size the engagement the same day.
