Home / Certifications / Cyber Essentials Plus
IASME-assured Certification Body · NCSC-assured Cyber Advisor
Cyber Essentials Plus
The same five controls as Cyber Essentials, independently tested by an assessor. The level that larger customers, defence primes and insurers increasingly ask for.
What's included
Everything you need to get certified
- An external vulnerability scan of your internet-facing IP addresses
- Internal scans of a sample of devices, checking high and critical updates were applied within 14 days
- Testing that malware protection blocks malicious email attachments and downloads
- Checks of MFA on cloud services and separation of admin accounts
- Your certificate, valid for 12 months
Who it's for
Organisations whose customers, contracts or insurers want independent proof that the Cyber Essentials controls work in practice.
Good to know
- It must be completed within three months of achieving Cyber Essentials. If you don't hold Cyber Essentials yet, choose the bundle below.
- Since April 2026 a second sample of devices is tested after fixes, so remediation has to cover the whole estate. How to prepare.
- Add an optional pre-assessment vulnerability scan for . We scan your devices before the assessment and give you time to fix any issues, so there are no surprises on the day.
Questions
Cyber Essentials Plus FAQs
Can we go straight to Cyber Essentials Plus?
No. Plus builds on Cyber Essentials and must follow within three months. The bundle option includes both.
Is the testing done on site?
Much of it can be done remotely. We agree the approach and dates with you before testing starts.
What happens if the assessor finds issues?
You have a short window to fix them before a second sample of devices is tested.
Should we have a vulnerability scan before the assessment?
It's optional, but recommended. For a fixed fee we scan your devices before the assessment and give you time to address anything we find, which is the best way to avoid failing on missing updates.
Let's Talk Security
Not sure which certification you need?
Talk to one of our team, who will be happy to talk through your requirements.