What is Cyber Essentials?

Cyber Essentials is the UK government-backed certification scheme that demonstrates your organisation's commitment to cyber security. It verifies that five key technical controls are in place - firewalls, secure configuration, access control, malware protection and patch management - and is increasingly required by clients, insurers and public sector contracts.

Backed by the National Cyber Security Centre, certification tells customers, partners and regulators that you have taken the fundamentals seriously. We guide you through the entire process, from your first gap analysis to a certificate you can display with confidence.

Start Your Certification

The five controls Cyber Essentials covers

Certification is built around five practical safeguards that, together, stop the overwhelming majority of common internet-based attacks.

Firewalls

Properly configured firewalls and internet gateways that control what can enter and leave your network, keeping untrusted traffic out.

Secure Configuration

Devices and software set up to reduce vulnerabilities - removing default passwords, unnecessary accounts and unused features.

Access Control

Giving people access only to what their role needs, protecting accounts with strong authentication and removing access promptly when it is no longer required.

Malware Protection

Anti-malware, application allow-listing or sandboxing to stop malicious software running on your devices.

Patch Management

Keeping operating systems, applications and firmware up to date so known vulnerabilities are closed before they can be exploited.

Verified & Certified

Once the controls are in place, your assessment is independently verified so you can display your certification with confidence.

Cyber Essentials vs Cyber Essentials Plus

Standard Cyber Essentials is a self-assessment, verified by an independent assessor - a fast, cost-effective way to prove the fundamentals are in place. Cyber Essentials Plus adds a hands-on technical audit, where an assessor tests your systems directly to confirm the controls you have declared are actually working.

Plus is generally seen as the stronger, more credible of the two, and is often preferred by larger clients and public sector buyers. We help you decide which level is right for your business and get you there efficiently.

  • Cyber Essentials assessment support
  • Cyber Essentials Plus (full technical audit)
  • Gap analysis and remediation
  • Annual renewal management
Start Your Certification
CE

Achieve recognised Cyber Essentials certification with our expert guidance

How we get you certified

We handle the heavy lifting so certification is straightforward, even if you are starting from scratch.

01

Gap Analysis

We review your current setup against the Cyber Essentials requirements and show you exactly where you stand and what needs to change.

02

Remediation

Our engineers help you close any gaps - configuring firewalls, tightening access control and getting patching and malware protection in order.

03

Assessment

We prepare and support your submission, and for Cyber Essentials Plus we get you ready for the hands-on technical audit.

04

Renewal

Certification lasts 12 months. We track your renewal date and manage the process each year so your status never lapses unnoticed.

Cyber Essentials FAQs

What is Cyber Essentials?

Cyber Essentials is a UK government-backed certification scheme that verifies your business has basic technical controls in place to protect against common cyber-attacks. It covers five key areas - firewalls, secure configuration, access control, malware protection and patch management.

What's the difference between Cyber Essentials and Cyber Essentials Plus?

Cyber Essentials is a self-assessment, verified by an independent assessor. Cyber Essentials Plus adds a hands-on technical audit, where an assessor tests your systems directly to confirm the controls you have declared are actually working. Plus is generally seen as the stronger, more credible of the two.

Do I need Cyber Essentials for government contracts?

Yes, in many cases. Cyber Essentials certification is a mandatory requirement for suppliers bidding on certain UK government contracts, particularly those involving the handling of sensitive or personal information. It is increasingly requested by private sector clients and insurers too.

How long does Cyber Essentials certification take?

Most businesses complete Cyber Essentials within a few weeks, depending on how ready your existing systems are. Certification lasts 12 months, after which it needs to be renewed - we manage the renewal process for our clients so nothing lapses unnoticed.

How much does Cyber Essentials cost?

The certification itself carries a set assessment fee that varies by the size of your organisation, and Cyber Essentials Plus costs more because of the technical audit involved. We give you a clear, all-in quote covering our guidance, any remediation work and the assessment before you commit.

Explore our wider cyber security services or learn about cyber security to understand the threats certification helps protect against.

Ready to get certified?

Talk to us about Cyber Essentials or Cyber Essentials Plus - we'll guide you the whole way.

Start Your Certification