Put the basics in place.
Review the five requirements with your website team and address known gaps.
FOR CARIBBEAN BUSINESS WEBSITES
Good security.
Visible
commitment.
Give visitors a reason to feel more confident. Mitigate-5 independently verifies five baseline security requirements for your business website.
A G5 Cyber Security initiative. Built around practical care.
WEBSITE SECURITY
M
5
MITIGATE-5
FIVE REQUIREMENTS. ONE COMMITMENT.
↗ HTTPS
▦ Hardening
◇ Web firewall
♡ Statement of care
⟳ Continuous improvement
A framework for better website care
Illustration, not a certification award
Illustration, not a certification award
INDEPENDENT VERIFICATION
FIVE PRACTICAL REQUIREMENTS
ONGOING COMMITMENT
CONFIDENCE STARTS WITH ACTION
Your website is a front door.
Show you take care of it.
Customers, partners and the public depend on your online presence. Mitigate-5 helps Caribbean businesses demonstrate that they have taken practical steps to protect it.
Certification recognises baseline website security checks. It does not replace a full penetration test or guarantee that a website is free from vulnerabilities.
THE MITIGATE-5 STANDARD
Five requirements.
A stronger foundation.
Understand what is checked,
why it matters and where to start.
01
HTTPS
+
Protect every connection.
Your website should load automatically over HTTPS, use strong encryption and include HSTS. The published criteria require an A or B SSL Labs grade.
Read the published requirement ↗
02
Hardening
+
Close common gaps.
Apply security headers, update vulnerable components and reduce sensitive disclosures. Basic automated scans must return no high or critical risk findings.
Read the published requirement ↗
03
Web firewall
+
Filter harmful requests.
Use a web firewall to filter malicious traffic before your website processes it. Review the configuration and verify that filtering works.
Read the published requirement ↗
04
Statement of care
+
Make security a conversation.
Publish a clear statement about protecting your website and its visitors. Include a visible contact option for reporting security weaknesses.
Read the published requirement ↗
05
Continuous improvement
+
Keep protection moving.
Allow periodic checks and maintain the five requirements. Certification expires at the end of the calendar year, with re-verification in November and December.
Read the published requirement ↗The published programme requirements and agreed assessment terms govern certification.
FROM PREPARATION TO CERTIFICATION
A clear path.
Every step of the way.
Let’s get started ↗
Tell us about your website.
Start an enquiry. We will discuss the process, terms and authorisation needed.
Have your controls checked.
G5 checks the agreed requirements and explains any issues that need attention.
Keep your commitment.
Receive a digital certificate when the requirements are met and prepare for periodic checks.
♡
Protection is a practice.
Keep it going.
REVIEW → IMPROVE → REPEAT
MORE THAN A ONE-OFF CHECK
Trust takes
continued care.
Websites change. Software ages. New weaknesses appear. Keeping the five requirements in place helps turn certification into an ongoing responsibility.
- Keep your software and security settings up to date.
- Make it easy for people to report a concern.
- Review protection when your website changes.
BEFORE YOU APPLY
Good questions. Clear answers.
Who is Mitigate-5 for?
The programme is designed for corporate websites belonging to Caribbean businesses. Contact G5 to discuss the suitability of your website.
Is this a penetration test?
No. It verifies the programme’s baseline requirements. Complex application weaknesses and business logic may need a separate, detailed security assessment.
How long is a certificate valid?
The published programme states that certificates expire at the end of each calendar year. Re-verification takes place in November and December. Confirm the applicable dates with G5 when applying.
What does certification cost?
Contact G5 for the current terms, scope and any applicable fees before proceeding.
Can I check a website’s certification?
Ask G5 to confirm the current status, scope and validity of a certificate. Historical listings do not establish current certification.
Request verification ↗How do I report a concern?
Contact G5 with the website address and a brief description. Do not send passwords, personal information or exploit code in your first message.
Report a concern ↗MITIGATE-5 CERTIFICATION
Apply to certify your organisation’s websites
Use this application to submit your organisation’s websites for Mitigate-5 certification. Have your organisation’s details and the website addresses ready before you start.
Submitting this form starts your application. Certification is confirmed after G5 reviews the websites against the Mitigate-5 requirements.
Loading the certification application…
PLAN YOUR CERTIFICATION
Request a quotation
Tell us which websites your organisation wants to certify and what support you need. G5 will use these details to prepare a quotation.
If you are ready to put your websites forward for certification, use the certification application.
Loading the quotation form…