The UK Government's minimum cyber security standard.
Cyber Essentials is the NCSC-backed scheme that helps protect organisations against common cyber attacks. Certification can help you win contracts and may include cyber insurance.
What Cyber Essentials covers
Five technical controls, assessed against the official NCSC standard.
From readiness to certification
- Gap assessment against all five controls
- Device and patching review
- Multi-factor authentication review
- Firewall configuration review
- User access review
- Cloud service configuration review
- Full certification support
- Ongoing compliance checks
Why certification matters
- Government-recognised certification that proves your baseline
- Required to bid for many government and public sector contracts
- Cyber insurance included for eligible businesses under £20m turnover
- Demonstrates real security commitment to clients and partners
Common questions
Firewalls and internet gateways, secure configuration, user access control, malware protection, and patch management, assessed against the official NCSC standard.
Yes, cyber insurance is included for eligible businesses with turnover under £20m, as part of the standard Cyber Essentials certification.
Often, yes. It’s required to bid for many government and public sector contracts, and it’s increasingly appearing in private-sector procurement and insurance questionnaires too.
A gap assessment against the five controls, closing whatever gaps turn up, then a self-assessment questionnaire reviewed by a certifying body. We support the full process end to end, not just the initial assessment.
Full certification support, from the initial gap assessment through to ongoing compliance checks and annual renewal, not just a one-off review.
Find out how ready you are.
A free readiness check against all five controls, with a clear list of what to fix before you apply.