What the certification covers
- Cyber Essentials
- Cyber Essentials Plus
- Accredited partner
- Five controls
What it does
Checks the five controls
Cyber Essentials covers firewalls, secure configuration, user access control, malware protection and security updates. We review your set-up against each one.
Covered by the managed service
Our service already handles much of this: secure configuration, updates, malware protection, user access control and firewalls. We fill the gaps that remain.
Assessed by a partner
We work with an accredited certification partner for the assessment. We do not certify, so the decision and the certificate come from them.
How it works
A one-off project we run with you, from first review to submission. Your team keeps working as normal throughout.
We review where you are
We compare your Microsoft 365, Windows devices and firewalls with the Cyber Essentials requirements and list any gaps.
We close the gaps
We make the changes under a plan you approve before work starts. Much of the groundwork is already in place through our managed service.
We prepare you for assessment
We gather the evidence the assessor asks for and run a final check. For Cyber Essentials Plus, we also prepare your devices for the hands-on technical check.
The partner assesses
An accredited certification partner carries out the assessment. We stay on hand to answer their questions while it runs.
Why it matters for legal, financial services and insurance firms
Law firms
Clients and their insurers often ask for proof of basic security before they share matters. Cyber Essentials gives you a recognised answer. IT for law firms
Financial services
Partners and regulators look for clear evidence that customer data is protected. Cyber Essentials sets out the basic controls to show. IT for financial services
Insurance
Insurers may ask about your security before they quote or renew cover. Cyber Essentials gives you a clear, recognised answer for that conversation. IT for insurance
Other compliance services
Frequently asked questions
Do you certify us?
No. We prepare you for Cyber Essentials and Cyber Essentials Plus and work with an accredited certification partner, who carries out the assessment and issues the certificate.
Will we pass?
We cannot promise a result. We find and fix gaps before the assessment, so you go into the assessment prepared.
Is the managed service enough on its own?
It covers much of what the scheme checks, including secure configuration, updates, malware protection, user access control and firewalls. Some items still need evidence and a final check, which we handle in the preparation work.
How long does it take?
It depends on how much needs changing. We agree a plan and timescale after the initial review.