Island-wide cyber security risk assessment
THE SURVEY IS NOW CLOSED
The Island-wide cyber security risk assessment provides insight into the current cyber security maturity of businesses on the Island. It's used to help us develop policy to help businesses and citizens strengthen their cyber security resilience.
We sent local small, medium and large enterprises tailored surveys relevant to the size of their business and asked them to complete a set of questions around the business’s cyber security landscape.
This work was being delivered by our partner Actica Consulting, a professional services business that is certified by the UK National Cyber Security Centre to conduct risk assessments. Actica will make sure that all the data is aggregated and anonymised before sharing it with the Government of Jersey. Actica will not pass any of the data on to third parties and all data submitted will be erased within six months of the project ending.
How the survey works
Smaller companies were sent the ‘lighter survey’ containing under 40 questions.
Medium and larger companies were sent the ‘full survey’ containing under 60 questions.
Both surveys are mapped against the
National Institute of Standards and Technology (NIST), Cybersecurity Framework. The NIST supports organisations to improve their ability to prevent, detect and respond to cyber attacks.
The Government will not have access to any individual company’s specific survey data, it will instead receive an anonymised and aggregated findings document.
What this means for local businesses
Every business that took part will receive a free report identifying their cyber security maturity. The report:
Up to 50 participants could win the cost of the Cyber Essentials certification.
When will I hear about the Cyber Essentials Prize Draw?
If you entered the Prize Draw to win the cost of Cyber
Essentials certification, worth £300, you will be contacted directly by Actica
Consulting with further details by Friday 16 October.
How will I receive a copy of my report?
In order to securely transfer your tailored report, you will
need to create an Egress account. There
is no cost associated with setting up this account, it enables Actica
Consulting to determine that you are the intended recipient, and that the
report cannot be intercepted in transmission.
During the week 30 November to 4 December you will receive an email from Egress confirming that Actica Consulting has sent you a secure email.
The email from Egress will contain a link you will need to follow to create an Egress account.
When opening the account, please use the same email address that you received the initial email from Egress on.
Once you have created the account, your personalised report should be waiting for you on Egress.
What if I have trouble accessing my report?
If you have any difficulties retrieving your business’s
cyber security resilience report, please contact Actica Consulting on JerseyGovSecurity@actica.co.uk
Does Government of Jersey have access to my report?
The Government of Jersey will not have access to any individual
business reports. You will notice that the report is joint branded with
both Actica Consulting and the Government of Jersey logos, this is because the
project is a Government of Jersey driven initiative.
How it will benefit the public
Based on this risk assessment, the Government of Jersey will be developing policies and initiatives for local businesses to improve their cyber security landscape which will in turn make Islanders information safer.
How will i know if i have won the Cyber Essentials draw?
All participants who enter the Cyber Essentials
Certification prize draw will be assigned an historic lottery number from the
UK National Lottery (Lotto) which includes the bonus ball. These draw numbers will
be assigned chronologically to each participant in the order that participants
completed the survey, starting from the first draw of 2016. These draws will be
concatenated and converted to a single long number.
To determine who has won, participants’ numbers will be
compared to the UK Lotto numbers drawn on 21 October 2020. The 50
participants whose assigned Lotto numbers are closest the Lotto numbers drawn
will be the winners.
The way we will determine how close the numbers are is described in the steps below:
Each participant has been assigned ‘Lotto Numbers’ from a historic draw, with the first business to complete the survey assigned the first available Lotto number, starting from the first draw of 2016. The numbers are sorted as they are normally displayed on offical results. The first six numbers will be sorted largest to smallest with the bonus ball as the last number.
Each participant’s ‘Lotto Numbers’ will be transformed into a single long ‘Draw Number’ by joining the numbers together end-to-end (with numbers in the range of 01 - 09 taken as 1 - 9). For example:
53 - 54 - 55 - 56 - 57 - 58 - 59 becomes 53545556575859
01 - 54 - 55 - 56 - 57 - 58 - 59 becomes 1545556575859
The UK National Lottery numbers drawn on 21 October will be transformed in the same way as other Lotto numbers described in Step 1 and 2, creating a ‘Winning Draw Number’.
The participants’ Draw Number will be subtracted from the Winning Draw Number created in Step 3.
The absolute value the number created in Step 4 will be taken (this means that all negative numbers become positive, -10 becomes 10 for example). The 50 smallest numbers will be the winners.
As the numbers have been set in advance, the UK National
Lottery (Lotto) draw on 21 October will decide the winners automatically. Any
participant can work out which lottery numbers/draw numbers have won, if they
so desire, by using the process above. However, they will not be able be work
out the identities of the businesses that have won, other than themselves (if
they are a member of a winning business).
Participants will be notified of their results within 3
working days of the draw date. In the extremely unlikely situation that there
is a tie which results in more winners than prizes the results of the next
Lotto draw on 23 October will be used to break the tie for participants tied
for 50th place. This will follow the same process as above.
gov.je