וועבזייטל זיכערהייט טעסט

נאָר אן אנדער וואָרדפּרעסס פּלאַץ

רעגירונג האט אַ סייבער זיכערהייט רעזשים ווי די וק רעגירונג סייבער עססענטיאַלס סערטאַפאַקיישאַן??

· ·

The United States does not have a direct equivalent to the UK’s סייבער עססענטיאַלס—a government-backed certification for basic cybersecurity hygiene—but it does have several programs and frameworks that serve similar purposes for different audiences and sectors.

Here’s how the US compares:

🇬🇧 UK Cyber Essentials (for comparison):

  • Audience: All UK businesses, especially SMEs and government suppliers.

  • Purpose: Basic, affordable certification to protect against common cyber threats.

  • Mandatory for: Many UK government contracts.

🇺🇸 US Alternatives / Comparable Programs:

1. NIST סייבערסעקוריטי פריימווערק (NIST CSF)

  • Audience: All sectors (voluntary), especially critical infrastructure and private businesses.

  • Purpose: Provides a flexible structure to manage cybersecurity risk.

  • Comparison: Broader and more detailed than Cyber Essentials, but not a certification by itself.

2. קמק (סערטיפיקאַטיאָן פון סייבערסעקוריטי מאַטוריטי מאָדעל) 2.0

  • Audience: US Department of Defense (DoD) contractors.

  • Purpose: Assesses and certifies companies on their ability to protect פעדעראלע קאָנטראַקט אינפֿאָרמאַציע (FCI) און קאַנטראָולד אַנקלאַססיפיעד אינפֿאָרמאַציע (וואָס).

  • Comparison: More rigorous than Cyber Essentials, but focused on defense contractors.

3. Federal Risk and Authorization Management Program (FedRAMP)

  • Audience: Cloud service providers to the US federal government.

  • Purpose: Standardized approach to security assessments and authorizations.

  • Comparison: Focused on cloud, not general business cybersecurity.

4. סייבער טראַסט מארק (פקק) – NEW

  • Audience: Consumer Internet of Things (IoT) device manufacturers.

  • Purpose: Labels IoT devices that meet cybersecurity standards.

  • Comparison: Transparency-focused, not a full organizational certification.

Summary:

בשעת די US lacks a universal, government-backed basic cybersecurity certification like Cyber Essentials, it has multiple sector-specific regimes that serve similar functions—especially for government contractors און critical infrastructure. Private companies often follow NIST CSF voluntarily or pursue third-party certifications like SOC 2, ISO/IEC 27001, אָדער CIS Controls compliance.

If you’re looking for something like Cyber Essentials for a US-based business, implementing NIST CSF and basic CIS Controls is a close equivalent in terms of practical guidance and protection from common threats.

געפֿינען זיך מער וועגן פריי וועבזייטל זיכערהייט טעסץ לערן מער