Cyber Essentials now fails you automatically for two things: a cloud login without multi-factor authentication, and a high-risk update older than 14 days. Neither requirement is new. The scheme just stopped treating them as negotiable. Read the filing #cyberessentials #mfa #compliance #infosec
