Cyber Essentials is the UK government-backed scheme, delivered via IASME, that certifies your organisation meets five core technical controls against common cyber attacks. Increasingly a condition of winning public sector and enterprise contracts, not just a nice-to-have.
We review your setup against the five controls — firewalls and routers, secure configuration, security update management, user access control, and malware protection — and tell you plainly what’s compliant and what isn’t.
Where gaps exist, we do the work to close them — configuration changes, patch management processes, access control tightening — rather than just handing you a report.
Guidance through the self-assessment questionnaire for standard Cyber Essentials, or hands-on support preparing for Cyber Essentials Plus’s external audit.
Standard Cyber Essentials is a verified self-assessment. Cyber Essentials Plus adds an independent technical audit — an external vulnerability scan and, in most cases, an on-site or remote check that your controls are actually working, not just documented. Many public sector and enterprise contracts specifically require Plus — we’ll help you work out which one you actually need before you pay for more than necessary.
Gap assessment against the five core controls.
Hands-on fixes for whatever’s missing, not just a report.
Support through self-assessment, or Plus’s external audit.
Certification runs on a 12-month cycle — we can manage that renewal so it never quietly lapses.
It depends entirely on how far your current setup is from the five controls — for an organisation already running reasonably tight IT, weeks; for one starting from a looser baseline, longer. We’ll give a realistic timeline after the gap assessment, not before.
Standard is enough for many contracts; some public sector and supply-chain requirements specifically ask for Plus. Check what your contract or tender actually requires — we can help interpret that if it’s not clear.
That’s normal, not a failure — a failed assessment just tells us exactly what to fix before resubmitting.
Tell us the deadline — we’ll tell you whether it’s realistic and what it’ll take.
Find our work useful? Add us as a preferred source on Google.