Cyber Essentials
Protect against common cyber threats
Access contracts requiring certification
Show that you take cyber security seriously
Cyber Essentials
Protect against common cyber threats
Access contracts requiring certification
Show that you take cyber security seriously
IASME – the NCSC’s Official Cyber Essentials Delivery Partner.
The National Cyber Security Centre (NCSC) is the UK’s technical authority for cyber security. Its mission is to make the UK the safest place to live and work online.
Who are the NCSC?
The National Cyber Security Centre (NCSC) is the UK’s technical authority for cyber security. Its mission is to make the UK the safest place to live and work online.
What is Cyber Essentials?
Cyber Essentials is an annually renewable certification scheme aligned to the UK Government’s minimum baseline standard for cyber security for organisations of all sizes.
The scheme is centred around five technical controls proven to protect any organisation from the most common internet-based cyber security threats.
Prepare to certify with free resources
Preview the Cyber Essentials questions for free
Get 30 minutes free with a Cyber Advisor
Use the free Readiness Tool
Learn about free cyber insurance
How does it work?
Choose your route
There are two routes to certification:
- Self-led – complete the verified self assessment using the free resources available
- Supported – Pay for support from a Cyber Advisor or Certification Body
If you require Cyber Essentials Plus, you will need to contact a Certification Body directly.
Choose your route
There are two routes to certification:
- Self-led – complete the verified self assessment using the free resources available
- Supported – Pay for support from a Cyber Advisor or Certification Body
If you require Cyber Essentials Plus, you will need to contact a Certification Body directly.
Route 1 – Self-led using free resources available
1. Preparation
- Download the Cyber Essentials assessment questions and Requirements for IT Infrastructure document from the IASME website.
- Review both documents to understand the requirements and prepare your answers.
- Draft your answers in a working document before using the assessment platform.
- Use the free IASME resources to support your preparation, including the Cyber Essentials Readiness Tool, Knowledge Hub, Cyber Essentials Advice Group and FAQs.
2. Purchase Cyber Essentials
- Click here to purchase Cyber Essentials based on the size of your organisation.
- Once you have purchased the assessment, you’ll receive login details for the secure assessment platform. You have up to 6 months to complete your assessment.
3. Complete the Assessment
- Answer the questions in the online platform, using your preparation work and resources.
- Save your progress and return as needed.
- A senior person in your organisation must confirm that your answers are accurate before submission.
4. Get Reviewed
- A qualified Assessor from a Certification Body will review your answers within 3 working days.
- If they need clarification or additional information, you can update and resubmit. Each resubmission is reviewed within three working days.
5. Get Certified
- Once your assessment meets all requirements, your Cyber Essentials certificate is issued instantly.
- You will receive your digital Cyber Essentials badge which can be displayed on your website.
- Certification is valid for 12 months.
- Renew annually to maintain your Cyber Essentials status and to ensure your organisation remains resilient against evolving cyber threats.
Route 2 – Pay for expert support
Get expert help at any stage
If you are an organisation that needs some bespoke, hands-on help with your Cyber Essentials assessment, there is plenty of help available.
What are Cyber Advisors and how can they help?
Cyber Advisors help you prepare for Cyber Essentials. They:
- Are assured by the National Cyber Security Centre (NCSC)
- Provide practical, hands-on advice for micro, small and medium-sized organisations
- Help you put the Cyber Essentials controls in place on your systems
- Follow a strict code of conduct to ensure advice is sensible and proportionate
- Some offer a free 30-minute consultation for eligible SMEs
What are Certification Bodies and how can they help?
Certification Bodies deliver the assessment and certification process. They:
- Are licensed cyber security companies that assess and certify your organisation
- Employ qualified Assessors who mark your submission
- Help you understand the assessment questions and how they apply to your organisation
- May offer support packages alongside assessment and certification
- Some are qualified to conduct audits for the Cyber Essentials Plus certification
What are Cyber Advisors and how can they help?
Cyber Advisors help you prepare for Cyber Essentials. They:
- Are assured by the National Cyber Security Centre (NCSC)
- Provide practical, hands-on advice for micro, small and medium-sized organisations
- Help you put the Cyber Essentials controls in place on your systems
- Follow a strict code of conduct to ensure advice is sensible and proportionate
- Some offer a free 30-minute consultation for eligible SMEs
What are Certification Bodies and how can they help?
Certification Bodies deliver the assessment and certification process. They:
- Are licensed cyber security companies that assess and certify your organisation
- Employ qualified Assessors who mark your submission
- Help you understand the assessment questions and how they apply to your organisation
- May offer support packages alongside assessment and certification
- Some are qualified to conduct audits for the Cyber Essentials Plus certification
Purchase Cyber Essentials assessment
Cyber Essentials is priced according to the size of your organisation
0-9 Employees
$460£320 + VAT€400
10-49 Employees
$630£440 + VAT€550
50-249 Employees
$710£500 + VAT€620
250+ Employees
$850£600 + VAT€740
Purchase Cyber Essentials Plus
Cyber Essentials Plus is a technical audit of your IT systems, priced according to the size and complexity of your network
The verified self-assessment questionnaire of Cyber Essentials is a prerequisite to Cyber Essentials Plus.
Although based on the same technical requirements, Cyber Essentials Plus includes a technical audit of your IT systems to verify that the controls are in place. In this way, it gives more assurance that you are complying with the scheme.
The audit covers a representative set of user devices, all internet gateways, and all servers with services accessible to the internet.
Need help from an expert?
Get expert help at any stage
Some of the Cyber Essentials self-assessment questions can be difficult to understand if you do not have a technical IT background or have a complex company structure.
Cyber Advisors work for a National Cyber Security Centre Assured Service Provider to provide small and medium sized organisations with reliable and cost effective cyber security advice and practical support. Advisors can apply their technical knowledge and provide hands-on support with the specific needs of an individual business in mind, to help them take recommended actions.
Cyber Essentials Assessors work for a Certification Body. They are trained and licensed by IASME to assess whether an organisation meets the criteria required for Cyber Essentials certification, and can issue that certification. They will also be able to help you understand the assessment questions and how they relate to your company.
Securing your supply chain with Cyber Essentials
Cyber security is a crucial component of risk management for all organisations. However, with the escalating cyber threats emerging from complex digital supply chains, it is imperative to integrate robust and reliable cyber security measures within supplier risk management frameworks.
Cyber Essentials certification is an effective tool for helping buyers manage this risk in their supply chain. It provides a tangible way for organisations to verify their suppliers’ cyber security measures. Requiring certification serves as a vital assurance tool to help organisations gain confidence in their suppliers and increase visibility into their supply chains.
Cyber Essentials Knowledge Hub
Certificate Search
Become an Assessor
Assessment Portal
