Pass Cyber Essentials Plus first time.
Cyber Essentials Plus shows customers and contracting authorities that your basic cyber controls are in place and independently tested. Cybergen prepares your environment, fixes the gaps and coordinates with a licensed certification body.
Illustrative. Certification is awarded by a licensed certification body.
The UK government-backed cyber security baseline
Cyber Essentials sets out five technical controls that protect against the most common internet-based attacks. Cyber Essentials Plus checks the same controls, with an assessor carrying out hands-on technical testing of a sample of your systems.
It is often requested in tenders, contract renewals and supplier questionnaires, and it gives customers tangible assurance that your basics are in place.
Would you pass today?
Tick what you are confident of. Nothing is sent or stored.
Same controls. Tested for real.
| Cyber Essentials | Cyber Essentials Plus | |
|---|---|---|
| Controls | The same five technical controls | The same five technical controls |
| How it is checked | Self-assessment questionnaire, verified by an assessor | Self-assessment plus hands-on technical audit |
| Testing | No technical testing | Testing of a sample of devices, internet gateways and internet-facing servers |
| Timing | Required first, or completed as part of Plus | Audit within 3 months of Cyber Essentials certification |
| Validity | 12 months | 12 months |
| Assurance | Good | Higher, independently tested |
From first check to certificate
What trips people up, and how we fix it
Critical or high-risk updates not applied within 14 days.
Operating systems or applications past end of support.
Cloud accounts without multi-factor authentication.
People browsing and emailing with admin rights.
Devices or services missed from the agreed scope.
Anti-malware disabled, out of date or missing.
Readiness and certification support
Readiness assessment
Assess your environment against the five control areas.
Scoping and assessment support
Define scope and help complete the Cyber Essentials assessment.
Remediation support
Resolve issues with patching, devices, access and configuration.
Pre-assessment checks
Test your readiness before the formal audit.
Certification body coordination
Coordinate the audit with an appropriately licensed certification body.
Annual renewal support
Stay certified year after year.
Independent certification
Cybergen is Cyber Essentials certified ourselves. Your Cyber Essentials Plus certificate is awarded by an appropriately licensed certification body. We prepare you and coordinate the process so the audit goes smoothly.
What are the five Cyber Essentials controls?
Firewalls, secure configuration, security update management, user access control and malware protection.
What is the difference between Cyber Essentials and Cyber Essentials Plus?
Both cover the same controls. Cyber Essentials Plus adds hands-on technical testing of a sample of your systems by an assessor.
How long is the certificate valid?
Twelve months. You need to recertify annually to stay on the list of certified organisations.
Does Cybergen issue the certificate?
No. Certification is carried out by a licensed certification body. We prepare you, fix gaps and coordinate the process.
Is Cyber Essentials required for government contracts?
Government guidance says it should be requested where relevant and proportionate, for example contracts involving certain personal data or ICT services. Many private sector customers also ask for it.
Get certified with confidence.
Tell us about your environment and any tender deadlines. We will recommend the fastest route to certification.
Thanks, we've received your enquiry
A member of our team will be in touch shortly.