Home / Certifications / Cyber Essentials
IASME-assured Certification Body · NCSC-assured Cyber Advisor
Cyber Essentials
The government-backed certification that shows your organisation has the five basic security controls in place. Assessed and certified by us as an IASME-accredited Certification Body.
What's included
Everything you need to get certified
- A pre-submission review that flags issues while there is still time to fix them
- Assessment against the five controls: firewalls, secure configuration, user access control, malware protection and security update management
- Your certificate and the Cyber Essentials badge, valid for 12 months
- Optional same-day fast track, subject to meeting the requirements
Who it's for
Required for many government and defence contracts, and increasingly asked for by insurers and larger customers.
Good to know
- Since April 2026 assessments use the Danzell question set. MFA on every cloud service and the 14-day patching rule are strictly enforced. Read what changed.
- Your IT team or MSP may need to answer some of the technical questions.
Questions
Cyber Essentials FAQs
How quickly can we be certified?
Often within 24 hours with fast track, once you meet the requirements. Our pre-submission review tells you exactly what to fix first.
How long does the certificate last?
Twelve months. You renew each year to keep it valid.
Which service level should we choose?
Self-managed suits teams who are happy to complete the questionnaire themselves. Assisted adds guidance from our team. Gap Assessment includes the Assisted service, plus validation of the five Cyber Essentials controls, verification of in-scope devices and a recommendations report.
Do we need Cyber Essentials before Cyber Essentials Plus?
Yes. Cyber Essentials Plus builds on it and must be completed within three months. You can order both together on the Cyber Essentials Plus page.
Let's Talk Security
Not sure which certification you need?
Talk to one of our team, who will be happy to talk through your requirements.