Thrive Tribe

Background
Thrive Tribe, a leading health and wellbeing organisation, sought to enhance its cybersecurity posture to protect sensitive client data and maintain trust with its stakeholders. As their outsourced managed IT provider, Espria were well placed to support Thrive Tribe with the certification, working closely with their team to guide and support them through every stage of the Cyber Essentials and Cyber Essentials Plus processes.
The Challenge
Thrive Tribe wanted to achieve Cyber Essentials and Cyber Essentials Plus certifications to ensure compliance with industry standards and to demonstrate their commitment to cybersecurity.
The Process
The certification process required Thrive Tribe to be assessed against five key security controls:
- User Access Controls
- Security Update Management
- Malware Protection
- Firewalls and Internet Gateways
- Secure Configuration
The Espria Compliance Team worked closely with Thrive Tribe to ensure that all controls were up to the required standard.
Specific Steps Taken
- Initial Assessment and Planning: Espria began by identifying any gaps in the requirements of the Cyber Essentials framework.
- User Access Controls Implementation: Collectively, existing user access controls, were reviewed to ensure only authorised personnel had access to sensitive data and systems. This included confirming all systems were secured with multi-factor authentication (MFA).
- Security Update Management: The team checked that all software and systems were updating within the specified 14-day period to maintain security.
- Malware Protection: The installation and configuration of their antivirus and anti-malware solutions across all endpoints were confirmed to be in accordance with industry best practice and that real-time protection was configured correctly to detect and mitigate any potential threats.
- Firewalls and Internet Gateways: The configuration of firewalls and internet gateways was reviewed to ensure they effectively blocking unauthorised access and were protecting the network from external threats.
- Secure Configuration: Espria conducted a thorough review of system configurations to ensure they complied with security best practices.
- Final Assessment and Certification: After implementing the necessary controls and measures, a final assessment was conducted to ensure compliance with the Cyber Essentials requirements. The self-assessment form was submitted and a third-party verification was conducted to confirm compliance.
Policies and Procedures Review
During the initial assessment, the Espria team reviewed several key policies and procedures, including:
- Access Control Policy
- Patch Management Policy
- Antivirus and Anti-Malware Policy
- Firewall Configuration Policy
- Secure Configuration Policy
Cyber Essentials Plus
Following the successful completion of the Cyber Essentials certification, Thrive Tribe went onto achieve Cyber Essentials Plus which involved an external assessment. This verified the security measures outlined in the Cyber Essentials certification were actively in place and being monitored. The external assessment included:
- Vulnerability Scanning: Thrive Tribe’s network and systems were analysed in order to identify any potential security weaknesses.
- Device Testing and Assessment: All corporate devices were tested to ensure they were secure and managed in accordance with the Cyber Essentials Plus requirements.
Results
Thrive Tribe successfully achieved both Cyber Essentials and Cyber Essentials Plus certifications, demonstrating their commitment to cybersecurity and providing assurance to their clients and stakeholders. These certifications have helped Thrive Tribe to:
- Enhance their cybersecurity posture and the protection of sensitive client data.
- Build trust with existing clients and attract new clients.
- Ensure compliance with industry standards and regulations.
Client Testimonial
As part of our ongoing commitment to cybersecurity, we saw the importance of achieving Cyber Essentials and Cyber Essentials Plus certifications for our existing clients as well as suppliers and prospective new customers. The support and guidance provided by the Espria Compliance Team was invaluable in helping us achieve these certifications.
Poonam Ahuja, Head of Managed Services at Thrive Tribe
You may be interested in
Businesses are losing money and jeopardising security to IT sprawl and quick fixes, says Espria
IT Leaders must take action on unchecked technology sprawl and shadow IT that are draining budgets, increasing cyber risks, and complicating their digital environment. According to a recent study, budgets towards insider risk management have doubled in the past 12 months, with 81% of business leaders looking to secure their internal business infrastructure as geopolitical tensions escalate and remote workforces become the norm. ‘Digital transformation ushered in new possibilities and solutions for computing, but it also introduced a potential for sprawl that burdens IT teams everywhere,’ said Brian Sibley, Virtual CTO at Espria. ‘When faced…
Espria launches Espria Connect, enhancing Microsoft Teams with Advanced Unified Communications
The new product, Espria Connect, isn’t just another telephony solution. It’s a game-changer, offering a cost-effective, scalable, and secure telephony solution for SMBs, mid-market and enterprise customers. Combining the power of Microsoft Teams with Cloud-Based Unified Communications, Espria, the leading managed services provider, is excited to introduce Espria Connect. This powerful solution streamlines business communication infrastructure and addresses the growing demand for a unified communication solution that supports hybrid work environments. Designed for businesses of all sizes, Espria Connect allows users to manage voicemail, make and receive calls, and access a diverse range of other…
Reimagining education: How AI is changing the way we teach, learn, and collaborate in schools
Technology has long been used by educators to support teaching and operations, facilitating staff with a wide range of platforms and resources. A particular tool that has sparked both controversy and curiosity is the inclusion of artificial intelligence (AI). A study by BCS, the Chartered Institute for IT, found that most teachers are reluctant to use AI for pupil learning with 84% of educators not changing the way they assess their students’ work. This comes after Ofsted recently launched an independent review on the use of AI in schools and how to develop the understanding of…
Espria launches CSP renewal assessment service
Leading managed service provider launches new service to address the costs associated with software sprawl, helping to drive down OpEx as businesses increasingly feel the financial squeeze. Espria, a leading digital solutions provider, has launched a free M365 Licence Assessment programme to help businesses save costs by reviewing existing licence estates and identifying those licences not in use or no longer being utilised. With Microsoft recently changing how they sell and structure licenses, businesses must now reassess their current M365 licenses, looking for ways to reduce costs and keep the capabilities they need as they…
Your guide to leveraging NCE pricing to get the best value
Renewing your Microsoft Licensing Agreement is an opportunity to align your IT strategy with your business goals. It allows you to take advantage of the latest technologies, optimise costs, and ensure compliance with industry standards. While this might seem straightforward at first glance, to achieve the best value and biggest discounts, it’s often more complex than it appears and navigating the renewalprocess requires careful planning. In this Blog we will walk through what you need to know about the new Microsoft Licensing rules,when to get the best value from your renewal, and how to review…
Loving your customers with AI, cybersecurity and peace of mind with MSP support
2024 has marked a massive shift for SME IT needs, as creating an appropriate and optimised business strategy has become an increasingly difficult challenge for business owners and IT operators nationwide.