u/No_Instruction8173

For UK startups selling to other businesses when did Cyber Essentials actually become something you had to think about?

Was it something you decided to get proactively or did a customer, contract or procurement process eventually ask for it?

I am particularly interested in smaller companies where there isn't a dedicated security person yet. It seems like there can be quite a gap between knowing you should have decent security practices and actually going through certification.

For anyone who's already been through it, what made you decide it was worth doing, and was the process what you expected?

I have been looking at how smaller businesses approach Cyber Essentials and it seems like the technical controls aren't always the hardest part.

Things like keeping track of devices, making sure MFA is set up properly, dealing with older software and actually knowing what's in scope seem to cause more trouble.

For those who have been through it, what was the part that took the most time or caught you out?

Lost some important files on my iPhone 13 a few weeks back. ChatGPT recommended Dr.Fone and PhoneRescue. Dropped cash on both and neither of them picked up shit.
Are all these data recovery tools just garbage? Has anyone actually managed to recover lost data on iPhone recently without completely wiping their phone? I'm pretty desperate at this point, and any real recommendations would be appreciated.