Assessment Webinar FAQ
How do I book a Cyber Advisor Assessment?
Please visit The Cyber Scheme website to book a Cyber Advisor assessment https://thecyberscheme.org/cyber-advisor-exam/
Are there any eligibility criteria for sitting the Cyber Advisor assessment, such as required experience or a specific degree/qualification?
There are no eligibility criteria for sitting the assessment. We do recommend that candidates have several years’ experience in the cyber security industry.
This should include consulting with customers from different types and sizes of business, good knowledge of the five Cyber Essentials controls and the NCSC Requirements for IT Infrastructure – v3.1 (or the most up to date version) and being able to recommend solutions proportionate to the size of an organisation.
How can I prepare for the Cyber Advisor Assessment?
There are resources available to help in your preparation for the assessment and we recommend you take time to review the links shown in the webinar.
The NCSC Cyber Advisor Standard v1.1 can be found on the NCSC website https://www.ncsc.gov.uk/schemes/cyber-advisor/information-for-service-providers
The candidate joining instructions can be found on The Cyber Scheme website https://thecyberscheme.org/cyber-advisor-exam-joining-instructions/ where candidates can also find a written guide https://thecyberscheme.org/cyber-advisor-supporting-notes/
There is also advice on useful documents you need to be familiar with and a guide to the assessment centre itself with a preview of the assessment platform.
In the assessment, can you explain how the short form question is linked to the multiple-choice question ?
A short form question will follow the multiple-choice question. It is linked by a theme related to the scenario. Both questions should be answered separately.
Can I ‘copy and paste’ from online sources to answer the short-form questions in the assessment or should I summarise the information in my own words?
The role of the Cyber Advisor is to provide help and practical guidance to a customer. Responding to a customer enquiry by copying and pasting online sources is not sufficient. This does not evidence the required skills, outlined in the Knowledge, Skills, and Behaviours, within the NCSC Cyber Advisor Standard v1.1 or demonstrate your ability to explain technical requirements in non-technical business language.
Please note, despite this, you must reference your sources of information in your response.
Would you be marked down for answering a short-form question with an answer that is ‘too long’?
No. Although there is a maximum character length for all questions, the platform allows plenty of space for answers.
It is important that you answer the question accurately, in sufficient detail, in plain English and using language that can be understood by a non-technical individual.
Remember that brevity can be a positive aspect of your answers especially as you will be addressing a customer, who may be very busy.
When answering a short-form question, is the candidate expected to write their thought process (an assumption based on the scenario given)?
Unless it supports your explanation of your answer to the customer, it is not necessary to provide assumptions in your response.
Your answer can include additional information you might need to ask from the customer to be able to give further guidance.
The Assessor may build on this in the discussion / role play.
Does every piece of security advice need to be backed by a reference?
If you use standards, or guidance, you must reference what you have used. A part of the test is checking you understand valid sources of reference material.
If I fail the assessment, is there a time delay before retaking/booking again?
Candidates who wish to retake the assessment, need to wait eight weeks before resitting. However, subject to availability, it is possible to book the assessment in advance for eight weeks ahead.
Further information can be found at https://thecyberscheme.org/cyber-advisor-exam-joining-instructions/
Is the Assessment Platform compatible on all browsers?
Yes. It is compatible with all the commonly used browsers.
Why is the assessment process to be a Cyber Advisor so rigorous?
The NCSC provides customers with their assurance that a Cyber Advisor and the company in which they work, the Assured Service Provider (ASP), give good service and high-quality, cost-effective advice, to help them implement the Cyber Essentials controls.
The ASP is, therefore, required to meet appropriate security and quality standards and the Cyber Advisor is assessed as having the competence to meet the standard set by the scheme. ASPs are also provided with a badge of assurance from the NCSC and the ASP, and the Cyber Advisor can be listed on the NCSC website as a supplier of Cyber Advisor services.
The assurance provided by the NCSC gives confidence to customers that the Cyber Advisor is a trusted source of advice and guidance for Cyber Essentials.
Are there training providers for successfully becoming a Cyber Advisor?
There are not currently any NCSC certified training courses to become a Cyber Advisor.
We recommend that candidates review the Knowledge, Skills, and Behaviours (KSB’s) expected of the role, as outlined in the NCSC Cyber Advisor Standard v1.1, in preparation for the assessment. They should also work on developing/ using these KSBs in their day-to-day duties.
To obtain feedback on the effectiveness of their communication, candidates can also practise their skills, by explaining the requirements of Cyber Essentials to colleagues, family members or friends who may have little or no knowledge of technology.
How can I find out what my company needs to do to become an Assured Service Provider for the Cyber Advisor Scheme?
Please contact [email protected] for further information about how to become an Assured Service Provider.
Can you provide advice to a customer as a Cyber Advisor and perform their Cyber Essentials assessment?
Yes. It is possible to perform the Cyber Essentials assessment, providing you are a licensed Assessor working for a licensed Cyber Essentials Certification Body.
How do I justify an answer in the short-form questions without quoting the material directly from online sources?
Candidates must cite their sources of information at the end of their answer. An example of this is in The Cyber Scheme Assessment Platform Guidance, which can be found in the candidate joining instructions https://thecyberscheme.org/cyber-advisor-exam-joining-instructions/