They both outline best practices for managing who has access to sensitive business data. However, while Cyber essential is based on security controls, IASME Governance is an information security assurance standard issued to SMEs for their implementation of the best security practices. IASME is an alternative to ISO 27001