- COVERING 800+ USERS
- MICROSOFT PARTNER
- Cyber Essentials Certified
- COVERING 800+ USERS
- MICROSOFT PARTNER
- Cyber Essentials Certified
A Clearer Route to Cyber Essentials Certification
Cyber Essentials provides a recognised security baseline for organisations of every size. It helps you put essential technical protections in place and demonstrate to customers, suppliers and other stakeholders that you take cyber security seriously.
Secure IT can support you throughout the process, from understanding the requirements and reviewing your current setup to addressing gaps, completing the assessment and achieving certification.
Choose between Cyber Essentials and Cyber Essentials Plus, depending on the level of assurance your organisation needs.
- Initial scope and readiness review
- Guidance through the assessment
- Identification of security gaps
- Technical remediation support
- Cyber Essentials assessment and certification
- Preparation for Cyber Essentials Plus
Talk to Us About Cyber Essentials
Fill in your details and a member of our team will contact you to discuss your organisation, current security and the most suitable certification level.
What Cyber Essentials Certification Means for Your Business
Certification provides more than a badge. It helps strengthen your security, demonstrate good practice and meet the expectations of customers and supply chains.
Recognised Security Baseline
Put the five essential technical controls in place and establish a clear foundation for protecting your organisation.
Stronger Protection
Reduce exposure to common internet-based threats by reviewing and improving your existing security controls.
Customer Confidence
Demonstrate that your organisation takes the security of its systems, information and customer data seriously.
Tender and Contract Readiness
Meet certification requirements that may apply when bidding for contracts or joining security-conscious supply chains.
Clear Security Review
Identify unsupported software, weak configurations, access issues and other gaps that require attention.
A Route to Greater Assurance
Begin with Cyber Essentials and progress to Cyber Essentials Plus when independent technical verification is required.
CYBER ESSENTIALS
Build a Strong Cyber Security Foundation
Cyber Essentials is the starting level of the scheme. Your organisation completes a detailed self-assessment explaining how it meets the required technical controls, and the answers are reviewed by an authorised Certification Body. Secure IT helps you understand the questions, define the correct assessment scope and identify any changes required before submission. Once the assessment requirements have been met, your Cyber Essentials certificate can be issued.
Cyber Essentials is suitable for organisations that want to:
- Establish a recognised security baseline
- Review their existing cyber security
- Reassure customers and suppliers
- Meet tender or contract requirements
- Strengthen supply-chain credibility
- Prepare for Cyber Essentials Plus
The Five Cyber Essentials Technical Controls
Cyber Essentials focuses on five practical areas that help protect organisations against common internet-based attacks. Every requirement within your selected certification scope must be met before certification can be awarded.
- Firewalls
Control connections between your systems and the internet. - Secure Configuration
Remove unnecessary accounts, services and insecure default settings. - Security Update Management
Keep operating systems, applications and other software supported and properly updated. - User Access Control
Give people access only to the systems and information they need. - Malware Protection
Use suitable measures to identify, block and contain malicious software.
CYBER ESSENTIALS PLUS
Independently Verify That Your Controls Are Working
Cyber Essentials Plus is based on the same five technical controls as Cyber Essentials, but adds an independent technical audit to verify that those controls have been implemented correctly and are working in practice. An authorised assessor tests a representative selection of systems within your certification scope. This provides stronger external assurance for customers, suppliers and organisations that require independent technical verification.
Your Cyber Essentials Plus audit must normally be completed within three months of your associated Cyber Essentials certification.
What the Cyber Essentials Plus Audit Involves
The assessment verifies that the controls described during Cyber Essentials are operating effectively across the systems included within your certification scope.
THE ASSESSMENT CAN INCLUDE:
- Confirmation of the assessment scope
- External vulnerability scanning
- Internal vulnerability scanning
- Testing of representative user devices
- Review of internet gateways
- Checks of internet-facing servers
- Security update verification
- Secure configuration checks
- Malware protection testing
- Review of access and admin controls
HOW WE SUPPORT YOU
From Preparation to Certification
We begin by reviewing your organisation, certification scope and current technical arrangements. This allows us to identify issues that could affect the assessment and explain what needs to be addressed.
Our team can then guide you through the questionnaire, support any necessary remediation and manage the assessment process through to certification. We can also help you review changes to your environment when renewal is due.
- Scope and readiness review
- Gap identification
- Remediation support
- Assessment guidance
- Certification and renewal support
Why Choose Secure IT for Cyber Essentials Certification?
We combine certification expertise with practical technical support, helping you understand the requirements, address security gaps and move through the process with confidence.
Authorised Certification Body
Complete your Cyber Essentials assessment and certification through a team authorised to assess organisations against the scheme’s requirements.
Support for Both Levels
Start with Cyber Essentials and progress to Cyber Essentials Plus with one team supporting both stages of your certification journey.
Practical Technical Guidance
Receive clear advice on the changes required across your devices, software, user accounts, cloud services and network security.
Remediation Support
Where improvements are needed, our engineers can help address technical issues before your assessment or Cyber Essentials Plus audit.
One Joined-Up Process
Preparation, technical support, assessment and certification are managed together, reducing delays and the need to coordinate multiple providers.
Annual Renewal Support
We can help review changes to your systems and prepare your organisation when your Cyber Essentials certification is due for renewal.
Looking for a better way to manage your IT?
Whether you need day-to-day IT support, stronger cyber security or help with a specific project, tell us what you’re looking to improve. We’ll arrange a straightforward conversation with the right person.
