Skip to main content Skip to accessibility
This website is not compatible with your web browser. You should install a newer browser. If you live in Jersey and need help upgrading call the States of Jersey web team on 440099.
Government of

Information and public services for the Island of Jersey

L'înformâtion et les sèrvices publyis pouor I'Île dé Jèrri

  • Choose the service you want to log in to:


    Update your notification preferences


    Access government services


    Clear goods through customs or claim relief

  • Talentlink

    View or update your States of Jersey job application

Cyber security risk assessment

Island-wide cyber security risk assessment


The Island-wide cyber security risk assessment provides insight into the current cyber security maturity of businesses on the Island. It's used to help us develop policy to help businesses and citizens strengthen their cyber security resilience.

We sent local small, medium and large enterprises tailored surveys relevant to the size of their business and asked them to complete a set of questions around the business’s cyber security landscape.

This work was being delivered by our partner Actica Consulting, a professional services business that is certified by the UK National Cyber Security Centre to conduct risk assessments. Actica will make sure that all the data is aggregated and anonymised before sharing it with the Government of Jersey. Actica will not pass any of the data on to third parties and all data submitted will be erased within six months of the project ending.

How the survey works

Smaller companies were sent the ‘lighter survey’ containing under 40 questions.

Medium and larger companies were sent the ‘full survey’ containing under 60 questions.

Both surveys are mapped against the National Institute of Standards and Technology (NIST), Cybersecurity Framework. The NIST supports organisations to improve their ability to prevent, detect and respond to cyber attacks.

The Government will not have access to any individual company’s specific survey data, it will instead receive an anonymised and aggregated findings document. 

What this means for local businesses

Every business that took part will receive a free report identifying their cyber security maturity. The report:

  • Is assessed against the NIST Cyber Security Framework
  • Contains recommendations tailored to their sector and business size
  • Benchmarks performance against organisations in the sector and those of a similar size

Up to 50 participants could win the cost of the Cyber Essentials certification. 

When will I hear about the Cyber Essentials Prize Draw?

If you entered the Prize Draw to win the cost of Cyber Essentials certification, worth £300, you will be contacted directly by Actica Consulting with further details by Friday 16 October.

How will I receive a copy of my report?

In order to securely transfer your tailored report, you will need to create an Egress account.  There is no cost associated with setting up this account, it enables Actica Consulting to determine that you are the intended recipient, and that the report cannot be intercepted in transmission.

  • During the week 30 November to 4 December you will receive an email from Egress confirming that Actica Consulting has sent you a secure email.
  • The email from Egress will contain a link you will need to follow to create an Egress account. 
  • When opening the account, please use the same email address that you received the initial email from Egress on.
  • Once you have created the account, your personalised report should be waiting for you on Egress.
  • The email address Actica Consulting will use in all correspondence will be

What if I have trouble accessing my report?

If you have any difficulties retrieving your business’s cyber security resilience report, please contact Actica Consulting on 

Does Government of Jersey have access to my report?

The Government of Jersey will not have access to any individual business reports.  You will notice that the report is joint branded with both Actica Consulting and the Government of Jersey logos, this is because the project is a Government of Jersey driven initiative. 

How it will benefit the public

Based on this risk assessment, the Government of Jersey will be developing policies and initiatives for local businesses to improve their cyber security landscape which will in turn make Islanders information safer.  

How will i know if i have won the Cyber Essentials draw?

All participants who enter the Cyber Essentials Certification prize draw will be assigned an historic lottery number from the UK National Lottery (Lotto) which includes the bonus ball. These draw numbers will be assigned chronologically to each participant in the order that participants completed the survey, starting from the first draw of 2016. These draws will be concatenated and converted to a single long number.

To determine who has won, participants’ numbers will be compared to the UK Lotto numbers drawn on 21 October 2020. The 50 participants whose assigned Lotto numbers are closest the Lotto numbers drawn will be the winners.

The way we will determine how close the numbers are is described in the steps below:

  1. Each participant has been assigned ‘Lotto Numbers’ from a historic draw, with the first business to complete the survey assigned the first available Lotto number, starting from the first draw of 2016. The numbers are sorted as they are normally displayed on offical results. The first six numbers will be sorted largest to smallest with the bonus ball as the last number. 
  2. Each participant’s ‘Lotto Numbers’ will be transformed into a single long ‘Draw Number’ by joining the numbers together end-to-end (with numbers in the range of 01 - 09 taken as 1 - 9). For example:
    53 - 54 - 55 - 56 - 57 - 58 - 59 becomes 53545556575859
    01 - 54 - 55 - 56 - 57 - 58 - 59 becomes 1545556575859
  3. The UK National Lottery numbers drawn on 21 October will be transformed in the same way as other Lotto numbers described in Step 1 and 2, creating a ‘Winning Draw Number’.
  4. The participants’ Draw Number will be subtracted from the Winning Draw Number created in Step 3.
  5. The absolute value the number created in Step 4 will be taken (this means that all negative numbers become positive, -10 becomes 10 for example). The 50 smallest numbers will be the winners. 

As the numbers have been set in advance, the UK National Lottery (Lotto) draw on 21 October will decide the winners automatically. Any participant can work out which lottery numbers/draw numbers have won, if they so desire, by using the process above. However, they will not be able be work out the identities of the businesses that have won, other than themselves (if they are a member of a winning business).

Participants will be notified of their results within 3 working days of the draw date. In the extremely unlikely situation that there is a tie which results in more winners than prizes the results of the next Lotto draw on 23 October will be used to break the tie for participants tied for 50th place. This will follow the same process as above.  

Back to top
rating button