Cyber Essentials
Gap analysis, remediation and hands-on support through to certification — the UK government-backed baseline your customers and contracts expect.
Overview
The baseline every UK organisation should meet.
Cyber Essentials is the UK government-backed scheme, run by the National Cyber Security Centre, that sets out the basic technical controls which protect against the most common internet-based attacks.
Certification is based on a self-assessment, independently verified by a certification body. Many customers, and some government contracts, ask for it as a minimum.
None of this is exotic. That is the point. Many common attacks exploit basic gaps, and the five controls are designed to close exactly those.
Approach
First principles.
- 01
Fix, don't just pass
The goal isn't a certificate on the wall. It's an environment where the controls are genuinely in place.
- 02
Evidence over assertion
Every answer in the self-assessment should be backed by something you can show.
- 03
Keep it running
Controls drift and patches lapse. Treat Cyber Essentials as a baseline you maintain, not a box you tick once a year.
Scope
What's included
Gap analysis
We review your environment against the Cyber Essentials requirements and show exactly where you fall short.
Remediation
Hands-on help fixing the gaps across the five controls: firewalls, secure configuration, user access control, malware protection and security update management.
Certification support
Help preparing and completing the self-assessment so your submission is accurate and backed by evidence.
Next step: Plus
Once certified, we can take you on to Cyber Essentials Plus and its hands-on technical audit.
Engage