Cyber Essentials is a government-backed scheme designed to help UK businesses guard against the most common forms of cyber attack. It sets out a simple but effective baseline of security controls that protect your data, your systems and your people.
For organisations looking to demonstrate a higher level of assurance, Cyber Essentials Plus includes the same requirements as the basic scheme, but with an independent hands-on technical audit of your IT systems. Many government contracts now require this certification to bid, and large enterprises increasingly demand it across their supply chains.
- Safeguard against common threats such as phishing, ransomware and malware
- Demonstrate compliance to customers, partners and regulators
- Build trust with clients and strengthen your reputation
- Qualify for public sector and government tenders
- Reduce risk of downtime, financial loss and reputational damage
- Self-assessment questionnaire against five key technical controls
- Focused on firewall configuration, secure settings, access control, malware protection and software patching
- Provides a recognised baseline level of cyber security
- Independent audit carried out by a qualified assessor
- Includes internal vulnerability scans, firewall checks and patch management review
- Verifies that your controls are not only in place but working effectively in practice
Gap Analysis
Identify where your organisation already meets the requirements and where improvements are needed
Implementation
Support in configuring systems, patch management, user access and security controls
Pre-Audit Review
Conduct readiness checks to make sure you pass the first time
Audit Support
Work with assessors during the Cyber Essentials Plus technical audit
Ongoing Guidance
Annual review and continuous support to maintain compliance
- SMEs aiming to secure new government contracts
- Suppliers working with large organisations that demand certification in their supply chain
- Businesses handling sensitive or personal data
- Organisations looking for an affordable first step towards ISO 27001
Most organisations can complete Cyber Essentials in a few weeks. Cyber Essentials Plus takes longer, as it requires independent testing.
Yes. You must first complete the basic Cyber Essentials before you can progress to Plus.
You will receive feedback highlighting areas that need improvement. We will help you address these and prepare for reassessment.
Certification must be renewed every 12 months.