|
Revisions: |
||
|
Date: |
Author: |
Description: |
|
March 2020 |
Emma Philpott |
First Version Published |
|
February 2021 |
Emma Philpott |
Typo corrected – second bullet on page two “fails” had been missed out before. |
|
January 2022 |
Emma Philpott |
Changes to reflect new fees applicable from 24th January 2022 |
|
July 2022 |
Emma Philpott |
Changes to reflect relaunch of IASME Cyber Assurance (formally IASME Governance ) and new fee structure |
|
September 2022 |
Emma Philpott |
Addition of charges for changes to existing certificates and creation of additional certificates |
|
June 2023 |
Emma Philpott |
Addition of charges for longer CB support calls |
|
April 2024 |
Emma Philpott |
Changes to reflect price increases in April 2024. Some changes to clarify assessor requirements for pool assessments |
|
April 2024 |
Emma Philpott |
Changes to reflect delay of new prices for Pool Assessors until 1st May 2024 |
|
Wendy Reeves |
Update charges for Certificate Changes that takes effect 2nd June 2025 |
|
|
Wendy Reeves |
Update invoicing requirements for Pool Assessments |
|
|
Wendy Reeves |
Remove ‘pre-May 2024’ prices. |
|
|
Wendy Reeves |
Updated clause 4 for launch of Phase 2 Allocations process |
|
|
Wendy Reeves |
Updated Moderation fees for Commercial clients |
|
|
18 May 2026 |
Ben Cross |
Adjusted terms to ensure consistency with Schedule 1 and the CB contract as a whole. Updated fees re certificates under section 2. |
1 Summary of Costs for the Cyber Essentials Scheme and IASME Cyber Assurance
All costs exclusive of VAT. IASME will invoice the Certification Body (CB) once a month.
|
Item |
Cost |
Cost Includes |
|
Annual License Fee for Cyber Essentials Certification Services. |
£550 |
Audit costs and assessor support costs (CB meetings, Yammer, webinars and phone support). |
|
Annual License Fee for IASME Governance Certification Services. |
£0 |
Has to be in conjunction with a Cyber Essentials Certification Services Licence. |
|
One-off set-up fee for Cyber Essentials Assessment Platform. |
£900 |
On-line assessment platform, branded with the CB company name and logo, where the CB can manage their own clients. |
|
Charge for every Cyber Essentials assessment account created. |
Micro sized clients: £210 (for assessments with “Evendine” question set onwards) |
Ongoing charge for assessment portal. |
|
Small sized clients: £245 (for assessments with “Evendine” question set onwards) |
Ongoing charge for assessment portal. |
|
|
Medium sized clients: £262.50 (for assessments with “Evendine” question set onwards) |
Ongoing charge for assessment portal. |
|
|
Large sized clients: £300 (for assessments with “Evendine” question set onwards) |
Ongoing charge for assessment portal. |
|
|
Charge for every IASME Cyber Assurance assessment account created. |
Micro sized clients: £210 (for assessments with “Hartnell” question set onwards) |
Ongoing charge for assessment portal. This does not include the cost of Cyber Essentials which is a prerequisite. |
|
Small sized clients: £245 (for assessments with “Hartnell” question set onwards) |
Ongoing charge for assessment portal. This does not include the cost of Cyber Essentials which is a prerequisite. |
|
|
Medium sized clients: £262.50 (for assessments with “Hartnell” question set onwards) |
Ongoing charge for assessment portal. This does not include the cost of Cyber Essentials which is a prerequisite. |
|
|
Large sized clients: £300 (for assessments with “Hartnell” question set onwards) |
Ongoing charge for assessment portal. This does not include the cost of Cyber Essentials which is a prerequisite. |
|
|
Charge for every CE+ (charge for the CE element according to the size of client plus £220 for the audit certification). |
Cost of Cyber Essentials element as per above plus £220 for audited element. (Cost is only £220 if client achieved CE within last 3 months) |
On-going payment for assessment portal and associated audits. |
|
Charge for every IASME Cyber Assurance Level 2 audit report moderated (Commercial clients). |
Micro sized clients – £250 Small sized clients – 375 Medium and Large sized clients – £500 |
This is a requirement for IASME Cyber Assurance audited certification (Level 2). |
Definition of company size
-
Micro sized company: 0 – 9 employees.
-
Small sized company: 10 – 49 employees.
-
Medium sized company: 50 – 249 employees.
-
Large sized companies: 250 or more employees.
2 Charges for Alterations to Certificates or Creation of Additional Certificates
The issuance of the first Cyber Essentials Certificate and first Cyber Essentials Plus Certificate (if applicable) are included in the assessment fee. Any further certificates or changes to that certificate will be charged at the following rates:
-
Price per company certificate name/address change – £100.00.
-
Price per correction of simple error on a certificate – £50.00.
-
Price per additional legal entity certificate – £10.00.
3 Charges for CB Customer Support Calls
If an assessor or other member of a CB organisation requires a phone call with the IASME team and also their customer for more than 30 minutes, they will be charged at a rate of £250 per hour after the initial 30 minutes.
4 Commercial Arrangement for Central Pool Assessments
In addition to approaching a CB directly, organisations can apply for Cyber Essentials or IASME Cyber Assurance L1 (ICA L1) assessments directly via the IASME website.
We have a group of CBs, described as the “Central Pool” who conduct these assessments.
For assessments conducted via the IASME Central Pool:
-
The Applicant applies and pays via the IASME website.
-
The Applicant completes and submits their questionnaire for marking.
-
The Applicant is allocated a CB.
-
The Applicant and the CB are introduced via email.
-
The Applicant and the CB, once introduced, are able to liaise directly with one another throughout the assessment.
-
When the assessment process is complete, the Applicant may, by mutual agreement, become the CB’s customer.
-
If this is agreed, the Applicant’s assessment account is transferred to the CB’s portal. The CB can then manage the renewal and be a point of contact for the applicant should they need further help or services.
IASME pays the CB a fee shown in the bulleted list below for each completed Cyber Essentials or ICA L1 assessment.
Fee paid to the CB per Cyber Essentials or ICA L1 assessment:
-
Micro clients – £110.
-
Small clients – £195.
-
Medium sized clients – £237.50.
-
Large clients – £300.
The CB must invoice IASME once a month.
Once a month, IASME will send the CB a purchase order (PO) detailing the assessments that the CB has undertaken within that month. The CB must check the PO for accuracy, and then raise an invoice to IASME to match the PO value, and quoting the PO number.
CBs will have the opportunity to invoice one additional time during each month if they wish.
Should there be a discrepancy in the PO, please contact [email protected] to discuss.
To join the Central Pool:
Any current CBs can join the Central Pool. Please make a request to IASME Customer Services at [email protected] or call 03300 882752.