Cyber security matters when your platform sits at the centre of accommodation bookings, supplier relationships and operational workflows.
We are pleased to confirm that VivreStays has achieved Cyber Essentials Plus certification, independently verifying that the technical cyber security controls we have put in place are working effectively across our assessed environment.
Cyber Essentials Plus goes beyond the Cyber Essentials self-assessment. It includes an independent technical audit of an organisation's systems, providing a higher level of assurance that the required security controls are implemented correctly in practice.
For us, achieving the certification was not about adding another badge to our website. It was about independently testing the security measures behind the systems our clients, suppliers and team use every day.
Key Takeaways
VivreStays has successfully achieved Cyber Essentials Plus certification.
Cyber Essentials Plus includes independent technical testing rather than relying solely on a verified self-assessment.
The assessment covers the same five core Cyber Essentials controls, with additional technical verification that they are working in practice.
Preparing for certification involved reviewing our technology environment, strengthening controls where required and ensuring security practices were consistently applied.
The certification gives our clients, suppliers and partners additional independent assurance around our approach to cyber security.
Cyber security remains an ongoing operational responsibility rather than a one-off certification exercise.
What Is Cyber Essentials Plus?
Cyber Essentials is a UK Government-backed cyber security certification scheme designed to help organisations protect themselves against common internet-based cyber attacks.
The scheme focuses on five core technical control areas:
firewalls;
secure configuration;
security update management;
user access control; and
malware protection.
Cyber Essentials Plus is based on those same requirements, but it goes further.
Rather than relying only on the organisation's verified answers, an independent assessor carries out technical testing of systems within the certification scope. This can include vulnerability testing and checks of representative user devices, internet-facing systems and security configurations.
The result is a higher level of independent assurance that the controls described by the organisation are actually operating in practice.
Why We Decided to Work Towards Cyber Essentials Plus
VivreStays is a technology-led accommodation platform.
Our clients use our systems to search for accommodation, manage bookings and extensions, monitor placements and coordinate accommodation requirements. Our suppliers also rely on our technology to manage properties, availability, bookings and account information.
That means cyber security cannot sit separately from product development or day-to-day operations.
As our platform and client base continue to grow, we want the controls protecting our systems to develop with them.
We had already achieved Cyber Essentials certification, demonstrating that the required baseline controls were in place across our operational environment.
Moving to Cyber Essentials Plus was the next step: having those controls independently tested.
Why Cyber Essentials Plus Matters to Our Clients
Our clients include organisations arranging accommodation for people during situations where reliability and responsible information handling are particularly important.
Technology supports many parts of that process.
Clients may use VivreStays to create accommodation requirements, review options, manage bookings, approve extensions and monitor ongoing placements.
Achieving Cyber Essentials Plus provides an additional layer of independent assurance that we have implemented recognised technical controls designed to reduce exposure to common cyber attacks.
It does not mean that any organisation can claim to be immune from cyber threats.
No certification can provide that guarantee.
What it does show is that our cyber security controls have gone through an established independent technical assessment and met the requirements of the Cyber Essentials Plus scheme.
Why It Matters to Our Suppliers
The same principle applies to our accommodation suppliers.
Professional property operators interact with VivreStays through technology, from account management and property information to bookings and operational communication.
We want suppliers connecting their businesses to VivreStays to know that security is being treated as part of the infrastructure supporting that relationship.
Cyber Essentials Plus gives us another independently assessed benchmark against which we can measure that responsibility.
Certification Is a Milestone, Not the Finish Line
Passing the assessment is something our team is proud of, but certification is not the end of our cyber security work.
Cyber threats, software, infrastructure and working practices continually change.
Cyber Essentials certification is also renewed annually, reinforcing the principle that organisations need to maintain their controls rather than treating certification as permanent.
Our focus now is the same as it was before the assessment: continue improving the security, reliability and resilience of the technology behind VivreStays.
As the platform grows, our security practices need to grow with it.
Sources
Building a More Secure VivreStays
Achieving Cyber Essentials Plus gives our clients, suppliers and partners further independent assurance that cyber security is being treated seriously across VivreStays.
For our team, it is also recognition of the work that goes on behind the platform: maintaining systems, controlling access, keeping technology updated and continuously improving the way we operate.
As VivreStays continues to develop its accommodation management technology, we will continue investing in the security and resilience required to support it.
Cyber Essentials Plus is an important milestone for us — and another step towards building infrastructure our clients and partners can rely on.
