The SJP mandate in practice
St James's Place operates one of the UK's largest restricted-advice partnerships. The cyber essentials mandate now applies across the entire Partnership - certification is required for every Practice that wants to continue transacting through the SJP platform, from single-Partner setups to large network partnerships.
Practice devices (in scope)
Partner and adviser workstations, Practice staff laptops, and the mobile devices used for client meetings - all in scope of the Practice's own Cyber Essentials.
Practice infrastructure (in scope)
Practice mail environment, client-data files (local or in practice-managed cloud storage), and the Practice network - router, firewall, wireless access points.
SJP-managed platforms (out of scope)
Salesforce Financial Services Cloud, Panacea, and the internal Partnership portal sit outside the Practice's scope - the Partnership operates these centrally. Devices that access them are still in scope.