On 3 November 2026 the government announced a new Cyber Essentials funding package for small and medium-sized organisations. For many businesses, it brings the cost of a first Cyber Essentials certificate down to less than the price of a team lunch.
Here's what's on offer, who qualifies and how to apply.
What's on offer
There are two separate schemes.
1. The Cyber Essentials First Step Fund
- 75% off a new Cyber Essentials certificate for eligible micro, small and medium-sized UK organisations
- You pay as little as £80 and no more than £125, plus VAT, depending on your size
- £2.4 million of government funding, expected to help around 6,000 businesses
- Open from 3 November 2026 until March 2027, or until the money runs out
- Allocated on a first come, first served basis
2. The Cyber Essentials for Suppliers grant
- Fully funded first-time Cyber Essentials certification, plus tailored support from an NCSC-assured Cyber Advisor
- For UK SME suppliers of organisations that have signed the government's Cyber Resilience Pledge
- Up to £7 million available until March 2029, expected to reach around 8,000 businesses
- You can't apply directly: the pledge signatory you supply nominates you and guides you through it
Who qualifies for the First Step Fund?
You're likely to qualify if:
- You're a UK micro, small or medium-sized organisation
- You're getting a new Cyber Essentials certificate
- You haven't held Cyber Essentials in the last four years
If you're renewing an existing certificate, this fund isn't for you. If you let your certificate lapse more than four years ago, it is.
What does it cover?
The funding covers the cost of the assessment and, if you pass, your certificate. It doesn't guarantee you'll pass, so it's worth making sure you meet the five controls before you submit:
- Firewalls
- Secure configuration
- Security update management
- User access control
- Malware protection
Since April 2026 assessments use the Danzell question set, which strictly enforces multi-factor authentication on every cloud service and the 14-day patching rule. Read what changed with Danzell.
Don't forget the insurance
UK organisations with a turnover under £20 million that certify their whole organisation can also opt in to £25,000 of cyber liability insurance at no extra cost. With the funding, that cover now comes with a certificate costing from £80.
How to apply
- Check you meet the controls. If you're not sure, talk to us first. A failed assessment still uses up your time.
- Start your application through our First Step link. First Step is run by IASME, the government's delivery partner for Cyber Essentials, and our link means your application comes to us as your Certification Body.
- Complete the questionnaire and submit it. We'll review it and assess you, with the 75% discount applied.
Because the fund is first come, first served and limited to around 6,000 businesses, we'd recommend applying sooner rather than later.
Where we can help
We're an IASME-assured Certification Body and an NCSC-assured Cyber Advisor, so we can assess and certify you and help you get ready.
- No IT team? We'll explain each question in plain English and check your answers before you submit.
- Have an IT company? We'll work alongside them, never instead of them.
- Nominated for the suppliers grant? We're an NCSC-assured Cyber Advisor, the kind of support the grant provides, so get in touch and we'll talk you through it.
Get in touch and we'll tell you whether you qualify and what to do next.
Sources
- New Government-backed cyber security protections could save UK businesses thousands, GOV.UK, 3 November 2026
- Cyber Essentials funding package, GOV.UK
- Cyber Essentials First Step, IASME