BSI is a member of CREST for a number of different schemes globally, which reinforces our expertise to deliver these important business services. It also demonstrates our commitment to work with leading industry bodies to help improve the business environment and enhance cybersecurity.

All suppliers bidding for government contracts, which involve handling sensitive or personal information, must be compliant with the new Cyber Essentials controls.

We are a CREST-accredited certifying body for the Cyber Essentials scheme. This can be a one off review against the standard or a more thorough Cyber Essentials Plus assessment, which recreates attacks scenarios to test the implementation of these controls.

BSI is an approved global provider of CREST Simulated Target Attack and Response (STAR) services. This involves an intelligence-led testing methodology that goes well beyond standard penetration testing in order to provide robust assurance to organizations facing sophisticated attacks.

The CREST STAR testing methodology uses this intelligence-led approach to identify the threats and modus operandi of threat actors facing a specific organization, then develops simulated attack scenarios in order assess an organization’s ability to defend against such an attack.

BSI is an approved global provider of CREST Cyber Security Incident Response (CSIR) services. This enables us to support you to assess your readiness to respond to cyber-incidents and feel prepared to deal with incident containment, as well as evidence gathering to support forensic investigations and your overall response. Plus if you have a suspected or actual cyber security breach or incident, we can assist you to scope, analyse, contain and eradicate the incident.

Our team will help you to: 

• Identify likely threat scenarios that would result in the need for a cybersecurity incident response and/or forensic investigation
• Identify desired outcomes based on each threat scenario 
• Perform GAP analysis on existing controls and monitoring systems to identify areas for improvement
• Identify legal and regulatory requirements such as the ability to carry out investigations, any requirement to retain and protect evidence, and any requirement to report such incidents to law enforcement/other regulatory authorities
• Identify internal capabilities and the need for engagement with specialist third parties for tasks, such as forensic analysis, host triage and log analysis.
• Develop cyber incident and forensic investigation plans
• Put in place measures to test plans with periodic reviews and updates
• Respond to a suspected breach or incident 

BSI is an approved global provider of CREST security penetration services providing customers with high levels of assurance that their systems are free from security configuration errors and known security vulnerabilities. Specific security penetration testing services BSI provide include:

• Infrastructure testing
• Application testing
• Server build reviews
• Mobile devices
• Wireless networks
• SCADA and ICS security
• IOT testing
• Connected and Autonomous Vehicles (CAV)
• Source code review
• Workstation/laptop build review
• Virtualization testing
• Stolen laptop review
• Gold build image review
• Database review
• Environment breakout