Vertas Group Maintains Cyber Essentials Plus Certification for the Third Year Running

Vertas Group has successfully renewed its Cyber Essentials Plus certification for the third consecutive year, reflecting the strength and consistency of its approach to cybersecurity and data protection across the organisation.

Maintaining this standard year after year demonstrates that robust cybersecurity is embedded within our day‑to‑day operations, supporting the safe delivery of services for our clients, colleagues, partners and the wider communities we serve.

Damon Impett, Associate Director of IT and Systems, said: “It is great to see the team successfully renewing our Cyber Essentials Plus accreditation for another year. For those outside of IT, this isn’t just a badge; it’s an independently tested standard that confirms we’re continuing to protect our systems, data, and day-to-day operations to a high level. Maintaining this accreditation requires a significant, sustained effort across the business, from strengthening controls and processes to ensuring secure ways of working are consistently followed. A big thank you to everyone involved, as keeping this in place is just as important as achieving it the first time.”

A Proven and Enduring Approach to Cybersecurity
Cyber Essentials Plus is the most rigorous level of certification within the UK Government‑backed Cyber Essentials scheme. It requires independent technical testing and verification to confirm that key systems and controls are effective in protecting against cyber threats.

Achieving recertification for a third year provides ongoing confidence that our systems continue to meet these exacting standards, and that cyber resilience remains a priority as risks and technologies evolve.

Confidence Through Capability and Governance
As part of this year’s process, our internal IT team once again carried out a detailed pre‑assessment ahead of the external audit. This approach highlights the maturity of our internal controls and the capability within the team to continually monitor, test and strengthen our cybersecurity position.

Security as an Ongoing Responsibility
At Vertas Group, cybersecurity is understood as a continual responsibility rather than a one‑off certification exercise. We remain focused on strengthening our systems, reviewing emerging risks and supporting colleague awareness to ensure best practice is applied across the organisation.

Retaining Cyber Essentials Plus for the third year running underlines our commitment to resilience, accountability and delivering services in an environment where security and trust are fundamental.