StrongKeep

Cyber Essentials +
Data Protection
Essentials

What compliance means for your business, and how we get you there.
An introduction to the two national marks, and the StrongKeep Compliance plan

What we will cover

  1. What Cyber Essentials and DPE actually are
  2. Why compliance is worth doing for a business like yours
  3. How StrongKeep gets you to both marks, without the heavy lifting
  4. What the Compliance plan includes, and what happens next
The aim today: a clear picture of the two marks and a realistic view of what it takes, so you can decide with confidence.

Cyber Essentials · CSA

The national cybersecurity mark from the Cyber Security Agency of Singapore. It shows an organisation has the everyday basics of good cyber hygiene in place.

Who it is for: organisations putting their cyber foundations in order for the first time. It is designed for smaller teams, not just large enterprises.
What it covers
  • Assets: know the hardware, software and data you have
  • Secure and protect: accounts, devices and email set up safely
  • Update: keep systems patched and current
  • Backup: copies you can actually restore from
  • Respond: a simple plan for when something goes wrong

Certified by an approved body and valid for two years.

Cyber Essentials, at a glance

Cyber Essentials measures across Assets, Secure and Protect, Update, Backup and Respond

Data Protection · IMDA

A national data-protection mark by IMDA, developed with the PDPC and CSA. It shows you have sound baseline practices for handling personal data under the PDPA.

The key link: DPE includes the whole of Cyber Essentials, then adds a data-protection layer on top. One body of work, both marks.
What it adds
  • A Data Protection Officer registered for your organisation
  • A data inventory: what personal data you hold, and where
  • Clear policies for collecting, using and keeping data
  • A breach response plan that meets PDPA duties
  • Staff training so the practices are actually followed

Awarded through IMDA's self-attestation checklist, recognised by the PDPC.

The seven steps to DPE

The seven steps to DPE: register a DPO, inventory assets, establish policies, breach and incident response plan, train employees, implement measures, review regularly
2marks

from the same base effort. About another 24% of work on top of Cyber Essentials earns you DPE as well.

Do once, get both

Cyber Essentials foundation
+ Data protection

Because DPE contains the whole of Cyber Essentials, we build the cyber foundation once, add the data-protection layer, and you earn both marks from a single body of work and one evidence pack. That is where the value is.

Why compliance is worth it

Assurance your processes are sound

An independent mark confirms you are doing the basics right, so security is not just a hope but something you can point to.

Lower exposure if something goes wrong

If a breach happens, showing you had recognised safeguards in place can reduce the fallout. The PDPC may view DPE favourably when deciding an outcome.

Win more business

A growing number of GeBiz tenders and enterprise buyers require Cyber Essentials or DPE before they will work with you. The mark keeps you eligible.

Earn trust

A national mark is a simple, credible signal to customers and partners that you take security and data protection seriously.

Everything you need, in one subscription

Core

Anti-malware
Anti-phishing
Credential protection
Scans
Training

Add-ons

Compliance
Insurance
Incident response
Agentic vCISO, 24/7In development

Dashboard

Employee Risk Overview

See all
HQ 5Sales 8Ops 13
NameGradeTrainingDevicePasswordsRecommendation
Peter ParkerA98%No alertsNo alertsAll clear
Bruce WayneB84%4 blocked sites1 reused passwordPhishing training
Clark KentC83%1 malware3 weak passwordsReduced access

Your whole team's posture, simplified. Focus on the riskiest, and leave everyone else to get on with their work.


Cyber Essentials

14 of 20 controls in place
70% completeAssessment ready in about 2 weeks
Asset register CompletePhishing training In progressIncident response plan Pending

How StrongKeep gets you there

The platform does the routine work of finding and tracking gaps. Our team guides you through the decisions and sign-offs. You get the marks without turning your business upside down.

The platform does the heavy lifting

  • Continuously checks your device and account security
  • Flags gaps against the Cyber Essentials and DPE requirements
  • Holds your policies and evidence in one place
  • Keeps everything current, ready for renewal

Our team guides the rest

  • Scope your systems and set the certification boundary
  • Configure the protective settings with your IT
  • Register your DPO and set up PDPA training
  • Assemble and submit the evidence for both marks
The payoff: because the platform keeps your evidence live all year, annual renewal is a review, not a rebuild.

From today to two marks

Today
Understand the marks and the plan
Scope
We map your systems and set the boundary
Build
Guided sessions build both marks together
Certify
CE assessment; DPE checklist and pledge
Ongoing
The platform keeps you current year-round

StrongKeep brings

  • The plan, templates and checklists
  • The platform, plus hands-on configuration help
  • The evidence packs, assembled and submitted for you

You bring

  • A senior sign-off, your IT contact and a DPO nominee
  • Admin access to your systems, and Corppass
  • Knowledge of the personal data you hold

Compliance plan

S$199/month

Covers 5 devices and all staff, with each additional device at S$6.90 a month. Billed annually.

StrongKeep qualifies for Singapore government grant support under CISOaaS and PSG.Both approvals are confirmed. Claims open once the government portal goes live.

That single subscription carries the protection, the staff training, the compliance workflow and the evidence pack for both marks. Bought separately, those are four contracts and four renewals.

Customers

BoPaikiForestSG Code CampusNeumark SurgeryLui CentreIHRPClavystBioCurasiaPrudentialWC Ong Plastic SurgeryWanderWonderApex Heart ClinicRCLTSkin Health SingaporeIntegra PartnersNBI Bearings SingaporeBoPaikiForestSG Code CampusNeumark SurgeryLui CentreIHRPClavystBioCurasiaPrudentialWC Ong Plastic SurgeryWanderWonderApex Heart ClinicRCLTSkin Health SingaporeIntegra PartnersNBI Bearings Singapore

Small organisations across healthcare, professional services and the charity sector already run on StrongKeep.

The same platform, and the same route to both marks, is what we are proposing to you.

Partners

OCBCMastercardStarHubMyRepublicCSAEnsignAWSPalo Alto NetworksGP+ CoopMSIGSetscoSingapore Business FederationCRPODigital Charities CollectiveLaunch AfricaMegaNetOCBCMastercardStarHubMyRepublicCSAEnsignAWSPalo Alto NetworksGP+ CoopMSIGSetscoSingapore Business FederationCRPODigital Charities CollectiveLaunch AfricaMegaNet

Ready when
you are.

The Compliance plan bundles it all: the platform, the guided sessions for both marks, and the annual upkeep that keeps you certified.
If you would like to go ahead: we scope your systems, lock the working-session dates, and take it from there.
Happy to answer any questions today.  ·  [email protected]