Cyber Essentials Certification
Government-backed cybersecurity certification that protects your organisation from the most common cyber threats — and proves it to your clients, partners, and regulators.
What is Cyber Essentials?
Cyber Essentials is a UK government-backed certification scheme, developed by the National Cyber Security Centre (NCSC). It provides a clear, straightforward framework that helps organisations of all sizes protect themselves against the most common cyber attacks.
There are two levels of certification: Cyber Essentials — a self-assessment questionnaire verified by a certification body — and Cyber Essentials Plus, which includes an independent technical audit for greater assurance.
Certification is required for all suppliers bidding for UK government contracts that involve handling personal data or providing certain ICT products and services.
The Five Technical Controls
Firewalls
Boundary firewalls and internet gateways configured to protect devices from unsolicited inbound traffic.
Secure Configuration
Systems configured securely with unnecessary software and accounts removed to reduce vulnerabilities.
User Access Control
User accounts managed with appropriate privileges — admin rights only where genuinely needed.
Malware Protection
Anti-malware or application allow-listing deployed across all devices.
Patch Management
Software and operating systems kept up to date with the latest security patches.
Cyber Essentials vs. Cyber Essentials Plus
Cyber Essentials
A self-assessment questionnaire independently verified by an accredited certification body. Ideal for organisations seeking government contract eligibility or demonstrating baseline security.
- Pre-assessment readiness review
- Questionnaire completion support
- Vulnerability scanning and remediation advice
- Technical configuration review (firewall, patching, access control)
- Staff guidance and awareness documentation
- Certification body liaison and submission support
- Certificate issuance and supply chain communication pack
- Annual renewal and reassessment support
Cyber Essentials Plus
Includes all elements of Cyber Essentials plus an independent hands-on technical assessment conducted by a qualified assessor. Provides a higher level of assurance for clients and supply chains.
- All Cyber Essentials deliverables
- On-site or remote technical assessment by a qualified assessor
- Independent verification of all five technical controls
- Penetration testing of internet-facing systems
- Detailed technical assessment report with remediation guidance
- Cyber Essentials Plus certificate issuance
Our Certification Process
Readiness Review
We assess your current technical environment against the five Cyber Essentials controls and identify any gaps.
Questionnaire & Evidence
We complete the certification questionnaire on your behalf and gather supporting evidence for each control.
Remediation Support
Where gaps exist, we provide clear, practical remediation guidance to bring your systems into scope.
Certification
We submit to the certification body and manage the process through to certificate issuance.
Protect Your Business. Prove It.
Contact our team to discuss your Cyber Essentials requirements. We offer a free scoping call to identify the right certification level for your organisation.
Enquire About Cyber Essentials