Many UK buyers will not award a contract without Cyber Essentials. Central government requires it for contracts that handle personal information or deliver certain ICT services, the defence supply chain has its own requirements, and a growing number of private companies now ask for it in supplier questionnaires.
Why it matters to buyers
It shows a supplier has the five basic controls in place: firewalls, secure configuration, update management, access control and malware protection. Those controls stop most common internet attacks.
Why it matters to you
- You can bid for work that would otherwise be closed to you.
- Supplier questionnaires get shorter and easier to answer.
- Insurers increasingly expect it.
- It gives your IT team a clear, external standard to work to.
Do not leave it until the tender
Certification can be quick, but fixing gaps takes time. If a tender is likely in the next few months, start now. We can often certify on the same day with our fast-track option once you meet the requirements.