Author
Principal Security Consultant
James is a Principal Security Consultant at &DEV (and.dev), with more than seven years in cyber security, and a certified ISO/IEC 27001 Lead Implementer. He leads &DEV's Microsoft 365 security work: Conditional Access and phishing-resistant MFA, privileged access, device and email security, and Cyber Essentials and Cyber Essentials Plus readiness for UK businesses that handle client money and confidential data. He writes here about what attackers go after and the controls that stop them.
Cyber Essentials, Cyber Essentials Plus, IASME Cyber Assurance and ISO 27001 compared for UK small businesses: what each one proves, what it costs, and which one your customer is actually asking for.