Foundations First

Get the basics right. Everything Else Follows.

Cyber Essentials Certification, guided by experienced assessors who explain everything without the jargon. 

  • IASME-backed Cyber Essentials Assessors 

  • Recognised by enterprise and public sector procurement
  • Fast assessment turnaround

What is cyber essentials?

The five foundations every secure business is built on.

Cyber Essentials is a UK government-backed certification that checks five key areas of your IT setup, the controls that make the biggest practical difference to your day-to-day security.

01 Firewalls- Protecting your network boundary from unauthorised access. 

02  Secure Configuration-Setting up devices and software safely from the start.

03 User Access Controls-Ensuring people only access what they need.

04 Malware Protection-Keeping devices protected against malicious software.
05 Software Updates-Staying current to close known vulnerabilities.

Two certification tiers

Which level is right for your business?

Both tiers are built on the same five foundations. The difference is how they’re verified and what they signal to the people you work with.

Standard

Cyber Essentials

You complete a structured questionnaire covering the five control areas. Our assessors review and verify your submission. The right starting point for most businesses.

Best for: businesses getting their foundations in place

Advanced

Cyber Essentials Plus

Everything in CE, plus independent hands-on testing of your controls. The strongest tier for businesses supplying enterprise clients or bidding for public sector contracts.

Best for: tenders, enterprise supply chains

NCSC Supply Chain Guidance

The NCSC and GOV.UK is calling on organisations to improve Cyber Essentials adoption across their supply chains. If you supply to larger businesses or public sector clients, certification is increasingly something they’ll ask for and CE Plus puts you in the strongest position when they do. If you have recently the signed the Cyber Resilience Pledge one of the actions you will need to take is adopting Cyber Essentials across your supply chain. 

Meet Your Assessor

Joe Bates

Cyber Solutions Provider Cyber Chain Alliance

“Before we talk about anything else, I always ask the same question: have you got the foundations covered? Whatever else you have in place or plan to put in place, Cyber Essentials is what everything sits on.”

Joe works with businesses of all sizes to take the uncertainty out of Cyber Essentials certification. His approach is straightforward explain everything clearly, move at your pace, and make sure you understand exactly where you stand before you take any next step.

How it works

Four steps. At your pace

From first conversation to certified — most businesses are through in under two weeks.

 

01
Scoping Call
We'll walk you through the scheme and requirements in full. Ask anything.
02
Your Submission
Complete the questionnaire at your own pace. Submit when you're ready.
03
Fast Assessment
We review your application quickly and efficiently to keep things moving.
04
1-to-1 Support
Dedicated video call support with a qualified assessor. Remote and flexible.

Transparent pricing

Simple pricing by business size.

All prices are fixed — no hidden costs, no surprises. 

View your business size below to see what’s included at each certification tier.

Cyber Essentials Pricing
CE Lite
  • Self-paced completion of question set
  • Initial welcome and scoping meeting
  • Email support
  • Approval of final questions and issue of certificate
  • Includes £25,000 Cyber Security Insurance Policy (For organisations with less than £20m turnover).
Employee Size Price
Micro (0-9)£360.00
Small (10-49)£470.00
Medium (50-249)£525.00
Large (250+)£600.00

All prices shown exclude VAT.

Book A Readiness Call
CE Guided
  • Expert support and quicker completion
  • Dedicated email & video-call support
  • Initial welcome and scoping meeting
  • Guidance presentation & offline questionnaire
  • Access to assessment portal
  • Approval of final questions and issue of certificate
  • 6-monthly review meeting
  • Includes £25,000 Cyber Security Insurance Policy (For organisations with less than £20m turnover).
Employee Size Price
Micro (0-9)£950.00
Small (10-49)£1,100.00
Medium (50-249)£1,200.00
Large (250+)£1,300.00

All prices shown exclude VAT.

Book A Readiness Call

Free Resource

Not sure where you stand?

Download our Cyber Essentials Readiness Checklist and rate your confidence across the five control areas before your call.

Cyber Essentials Readiness Checklist

A simple self-assessment covering both CE and CE Plus. No technical knowledge required. Bring it to your welcome call and we’ll walk through it with you.

Trusted by Clients - Slideshow

Trusted by Clients

The CCA team were knowledgeable about CE and CE+, along with any changes we needed for compliance. We wanted to obtain CE+ within a short time period and CCA always responded in a timely manner, answering our queries and guiding us through the process. CCA understood our business structure and worked with us to resolve any vulnerabilities. Overall great support provided and a smooth experience.

Client Feedback

The team have been excellent; we received detailed findings at regular check-ins and were offered advice on how we could best remediate them, which we found very helpful. Given the impressive quality of service and great communication, we would not hesitate to recommend them.

Client Feedback

The CCA team were extremely quick to respond to my queries, and gave thorough and concise info as to what was required, which made this process more streamlined for us, considering we are working with an MSP.

Client Feedback

Frequently Asked Questions

On average, how long does certification take to complete?

We recommend downloading the question set in advance and preparing your answers before applying. This helps avoid delays.

Once we receive your email address and mobile number for MFA, login details for the assessment portal will be sent. You will have 6 months to complete your assessment before the account is deleted.

If answers are prepared in advance, completing the self-assessment may take around 1 hour. An Assessor will review your submission within 1–2 working days. If any answers are not compliant, guidance will be provided and you may resubmit.

Preview Questions

Where can I find the document which describes the full requirements for the Cyber Essentials Scheme?

You can download the full IT infrastructure requirements document directly from the UK Government website using the link below.

View Document

How many of the questions do I need to get right to pass?

You must be compliant in the majority of questions to pass the assessment.

Important: If unsupported software is in scope, certification cannot be awarded.

Are there any automatic fail questions?

Yes. For example, any company using unsupported software within the scope of the assessment will automatically fail to achieve certification.

How long does the certification last before I have to renew my Cyber Essentials certification?

Cyber Essentials is an annually renewable certification.

Both Cyber Essentials and Cyber Essentials Plus certificates expire after 12 months.

IASME remove companies from their ‘certified organisations’ list if they have not been certified within the past year.

Ready to get your foundations in place?

A free 15-minute readiness call with us. No commitment, no jargon, just a straight-talking conversation about where your business stands.

Questions before booking? Email Joe directly at [email protected] or call 0330 236 8100