Websentials Earns the Cyber Essentials Mark, as Featured by IMDA

Websentials Pte. Ltd. is certified under the Cyber Essentials mark from the Cyber Security Agency of Singapore (CSA), with our certificate issued on 12 January 2025. Our certification journey is featured by IMDA in its Pre-Approval ICM Vendor Guide, in the thought leadership article “Cyber Shield On: How We Nailed the Cyber Essentials Mark!” [1].

For our clients, this means the team building your website, online store or AI chatbot follows cybersecurity practices that have been independently assessed against a national standard.

What Is the Cyber Essentials Mark?

The Cyber Essentials mark is a cybersecurity certification from CSA, designed mainly for small and medium enterprises (SMEs) and non-profit organisations in Singapore. It recognises organisations that have put essential cybersecurity measures in place to protect their systems and operations against common cyber-attacks. An independent assessor from a CSA-appointed certification body verifies each organisation, and the certification is valid for two years [2].

Why We Did It: Security Before It Becomes a Problem

Cyber Essentials certification was not mandatory for us. We pursued it because cyber threats are becoming more common, and our clients trust us with their websites, customer data and online stores. As we told IMDA:

“We thought, why not take a proactive step to protect our digital assets instead of waiting for something to happen?”

We engaged a consultant through CSA’s CISO as-a-Service programme. The consultant helped us find gaps, set up the right procedures and prepare for the audit, so we could avoid trial and error [1].

Our 3-Month Roadmap to Certification

1. October 2024, grant application: we applied for support under the CISO as-a-Service programme and were approved in about two weeks.
2. November 2024, technical hardening: we installed Atera remote monitoring and management software and applied CIS hardening to every laptop.
3. November to December 2024, team training: every team member completed cyber awareness training and quizzes.
4. December 2024 to January 2025, policies and audit: we reviewed our security policies and appointed ISOCert as our certification body.
5. 12 January 2025, certified: our Cyber Essentials certificate was issued.

What It Cost

With support from the CISO as-a-Service programme, the cost of our Cyber Essentials implementation came down from $4,800 to $1,440 [1].

Three Lessons for Other SMEs

• Automation is the easiest win. Turning on automatic updates and two-factor authentication (2FA) takes little effort and closes many common gaps.
• Security is everyone’s job. Working with an outside expert helped our whole team see data security as a shared responsibility, not just an IT task.
• Expert help gets it right the first time. Doing it yourself is possible, but a consultant helped us get certified without trial and error.

Thinking about certifying your own business? IMDA’s article includes a simple checklist: count your laptops and devices, check whether you qualify for CISO as-a-Service support, pick an approved consultant, train your team, and turn on 2FA and password changes straight away [1]. Check CSA’s Cyber Essentials certification page for the latest requirements [2].

What This Means When You Work With Websentials

Our Cyber Essentials certification sits alongside our three IMDA Pre-Approved Solutions, which IMDA also highlights in the article:

• Websentials Omnibot (GenAI chatbot): SMEs are eligible for up to 50% business grant support for the adoption of Websentials Omnibot, a Pre-Approved Solution under the IMDA SMEs Go Digital programme.
• WebCommerce Lite (e-commerce website): SMEs are eligible for up to 50% business grant support for the adoption of WebCommerce Lite, a Pre-Approved Solution under the IMDA SMEs Go Digital programme.
• Websentials Digital Marketing Package: SMEs are eligible for up to 50% business grant support for the adoption of Websentials Digital Marketing Package, a Pre-Approved Solution under the IMDA SMEs Go Digital programme.

Since 30 September 2026, SMEs apply for this support under the EDGE Grant, which replaced the Productivity Solutions Grant (PSG). Talk to our team to check your eligibility.

Frequently Asked Questions

Is Websentials Cyber Essentials certified?

Yes. Websentials Pte. Ltd. holds the Cyber Essentials mark from the Cyber Security Agency of Singapore (CSA). Our certificate was issued on 12 January 2025 after assessment by the certification body ISOCert.

How long is the Cyber Essentials mark valid?

CSA states that Cyber Essentials certification is valid for two years.

Was Websentials featured by IMDA?

Yes. IMDA’s Pre-Approval ICM Vendor Guide features our certification journey in its Thought Leadership Articles section, in the article “Cyber Shield On: How We Nailed the Cyber Essentials Mark!”.

Does Websentials provide Cyber Essentials consulting?

No. We achieved the Cyber Essentials mark for our own business. If you want help getting certified, CSA’s CISO as-a-Service programme lists approved consultants who can guide you.

Which Websentials solutions are IMDA Pre-Approved Solutions?

Three: Websentials Omnibot, WebCommerce Lite and the Websentials Digital Marketing Package. SMEs are eligible for up to 50% business grant support for the adoption of Websentials Omnibot, a Pre-Approved Solution under the IMDA SMEs Go Digital programme.

References

1. IMDA Pre-Approval ICM Vendor Guide: Cyber Shield On: How We Nailed the Cyber Essentials Mark!
2. Cyber Security Agency of Singapore: Certification for the Cyber Essentials Mark