Cyber Essentials & Cyber Essentials Plus

Get Cyber Essentials done, without the headache.

The UK government-backed scheme that protects against the most common cyber attacks, and that clients, insurers and public-sector buyers increasingly ask you to hold. We handle the gap analysis, fix what needs fixing, and get you certified.

What it is

Five controls that stop most attacks.

Cyber Essentials is built around five technical controls that, in place and maintained, block the majority of common internet-based attacks. Certification is valid for twelve months and is assessed against the current NCSC requirements.

  • Firewalls
  • Secure configuration
  • Security update management
  • User access control
  • Malware protection

How we run it

A clear path to certification.

You get delivery, not a report to action yourself. Here is how a typical certification runs.

1. Gap analysis

We assess your environment against the five controls and give you an honest picture of where you stand and what needs to change. No surprises later.

2. Remediation

We fix the gaps: firewall and access configuration, multi-factor authentication, patching, malware protection and secure device setup. We do the technical work ourselves.

3. Certification

We prepare and support your submission for the route that fits, the self-assessed Cyber Essentials or the independently audited Cyber Essentials Plus.

4. Ongoing maintenance

Controls drift over time. We keep yours in shape year-round, so renewal is a formality rather than an annual scramble.

Why bother

Certification opens doors, and closes gaps.

Cyber Essentials is widely required for UK government contracts and increasingly asked for in private-sector tenders, supplier onboarding and by cyber insurers. It also gives your customers a straightforward answer when they ask how you protect their data.

  • Increasingly required for public-sector and enterprise contracts
  • Often a precondition for cyber insurance cover
  • A clear answer to customer security questionnaires
  • Includes free cyber liability insurance for eligible organisations

About the free insurance. Certification currently includes cyber liability insurance for UK-domiciled organisations with turnover under £20m that certify their whole organisation via self-assessment. The cover is arranged through the scheme's delivery partner. We'll confirm current terms and eligibility with you before you rely on it.

Built in, not bolted on

Cyber Essentials sits inside our managed support.

For managed clients, the controls behind Cyber Essentials are part of how we run your IT every day, which is what keeps certification easy to maintain.

Managed IT support

Certification is far simpler when the underlying controls are already managed properly day to day.

Managed IT support

Regulatory readiness

See how Cyber Essentials fits the wider direction of UK cyber regulation and supply-chain expectations.

Regulatory readiness

Virtual CISO

For firms that need to go further, our vCISO service handles assurance, risk and customer security questions.

Virtual CISO

Ready to get certified?

Tell us where you are and what you need it for. We'll tell you honestly what's involved and how quickly it can be done.