Guide
Cyber Essentials Certification
Government-backed scheme helping organisations guard against common cyber attacks. Required for many government contracts involving handling of sensitive information.
Overview
Cyber Essentials is a government-backed certification that demonstrates your organisation has implemented basic cyber security controls. There are two levels:
- Cyber Essentials: Self-assessment questionnaire verified by external body
- Cyber Essentials Plus: Includes hands-on technical verification by qualified assessor
When required
- Bidding for UK government contracts involving handling of sensitive or personal information
- Contracts involving provision of certain ICT products or services
- Many private sector contracts now specify Cyber Essentials as a requirement
Five technical controls
-
Review five technical controls
Review the five technical controls and assess your current compliance
-
Choose certification level
Choose between Cyber Essentials (self-assessment) or Cyber Essentials Plus (verified)
-
Select certification body
Select an NCSC-approved certification body
-
Complete assessment
Complete the self-assessment questionnaire or arrange technical assessment
-
Pay certification fee
Pay certification fee (typically £300-£500 for basic, £1,500+ for Plus)
-
Maintain certification annually
Maintain certification annually (valid for 12 months)