Cyber Essentials certification, done with you.

Cyber Essentials is the UK government scheme, backed by the NCSC and delivered by IASME, that certifies an organisation has five basic technical controls in place. It is required for many public-sector and defence contracts, and is increasingly asked for in supplier questionnaires and by cyber insurers.

• Firewalls: every device that connects to the internet sits behind a properly configured firewall.
• Secure configuration: default passwords changed, unused software and accounts removed.
• Security update management: supported software only, with high and critical updates applied within 14 days.
• User access control: individual accounts, admin rights only where needed, and MFA on cloud services.
• Malware protection: anti-malware or application allow-listing on every device in scope.

• Windows 10 or other unsupported software still in use.
• Microsoft 365 and other cloud services without multi-factor authentication for every user.
• Staff using administrator accounts for everyday work.
• Shared or generic logins instead of individual accounts.
• Critical updates left longer than 14 days, often on firmware and third-party apps.
• Staff-owned laptops and phones that access company data but are not managed.

Our gap analysis checks each of these before anything is submitted, so you apply once. Download our Cyber Essentials readiness checklist (PDF) to check where you stand first.