Skip to content
  • There are no suggestions because the search field is empty.

What is a Cloud Service in Cyber Essentials

It's a common question, so what exactly is a cloud service you need to list within the Self-Assessment and subsequently have tested in a Plus Assessment.

The quick answer is: "any on-demand, scalable service, hosted on shared infrastructure, and accessible via the internet. For the purposes of Cyber Essentials, a cloud service will be assessed via an account (which may be credentials issued by your organisation, or an email address used for business purposes), and will store or process data for your organisation."

This now includes social media accounts used for business purposes!

For example: Microsoft 365/Azure, Google Cloud/GSuite, Amazon Web Services (AWS), QuickBooks, Dropbox, Ciphr HR, Salesforce etc

Within Cyber Essentials, data classification isn't relevant, therefore we are not concerned with what data is within a cloud service, if its used in the business, its in scope for Cyber Essentials.