DoveSurePlain questions, your own answers
Dove explains each requirement of the five areas in plain words. Answer each in your own words and attach what you have; no integrations or engineers are needed.
Who it’s for
DoveSure for Small Businesses
Your first security certification or customer review, without an IT team.
- Plain questions, answered in your own words
- Connecting systems is optional
- Cyber Essentials, if you sell into the UK, with no integrations at all
The challenge
A customer, a contract or an insurer asks for proof of your security, such as Cyber Essentials in the UK, ISO 27001 or SOC 2, and there is no IT department to ask. The questions are technical, and it is hard to know what counts as an answer.
How DoveSure helps
What Changes With DoveSure
A pack you can take to a certification body
A signed readiness pack that says what each answer rests on and names anything still missing, for the self-assessment you submit to an IASME certification body.
A certificate kept current
Record the certificate you are issued, with reminders 60, 30 and 7 days before it expires, and show it on your Trust Center if you choose.
If you sell into the UK
Cyber Essentials with Dove
Cyber Essentials is the UK government-backed scheme that UK public-sector contracts, and many customers and insurers, ask for. If you sell into the UK, Dove explains its five areas in plain words, you answer in your own words and upload what you have, and DoveSure builds a readiness pack for the self-assessment you submit to a certification body. No IT team or integrations are needed.
- DoveSure prepares you; an IASME certification body certifies you. DoveSure is not a certification body, and the readiness pack is not a certificate.
- Connecting Microsoft 365 or Google Workspace is optional. Connected, what those systems show is recorded as observed evidence, and a failing check is never hidden by a written answer.
Say what is in scope
Your devices, your network boundary and the cloud services you use, in plain words.
Answer each requirement
Firewalls, secure configuration, security updates, user access and malware protection, requirement by requirement. Answer each in your own words and attach what you have, such as a screenshot or a policy.
Download your readiness pack
A signed pack that says what each answer rests on and names anything that still blocks it. It shows as ready to submit once your scope is recorded and every area is answered.
Keep your certificate current
Record the certificate you are issued, and DoveSure reminds you 60, 30 and 7 days before it expires.
Using Microsoft 365 or Google Workspace? Connect it with read-only access when you want some answers observed automatically. It is optional.
Frameworks you’ll use
Questions
What People Ask
Do we need an IT team or any integrations?
No. A new organisation can reach a readiness pack that is ready to submit by recording its scope and answering each requirement of the five areas in its own words, with a file attached where it has one. Connecting Microsoft 365 or Google Workspace is optional and adds what those systems show.
Does DoveSure certify us?
No. Only an IASME certification body issues Cyber Essentials. DoveSure prepares you, gives you a readiness pack, and records the certificate once you have it.
Can our answer hide a problem a connected system has found?
No. If a connected check is failing, that area shows as failing, and your written answer cannot override it.
Related
The Parts of DoveSure You’ll Use
Also for
Who Else DoveSure Is For
Ready to prove it?
Know what you are responsible for, control whether it works, and prove it to anyone who asks.