Question 1

What is Cyber Essentials?

Accepted Answer

Cyber Essentials is a UK government-backed certification programme administered by the NCSC and IASME. It demonstrates that an organisation has implemented key technical safeguards—such as firewalls, access control, malware protection, patching, and secure configuration—to protect against common cyber threats.

Question 2

What is Cyber Essentials Plus?

Accepted Answer

Cyber Essentials Plus (CE+) builds on the self-assessment model of Cyber Essentials with an additional technical audit. Certified assessors perform vulnerability scans, device sampling, and confirm that required controls are actively in use.

Question 3

What is the difference between Cyber Essentials and Cyber Essentials Plus?

Accepted Answer

While both certifications assess the same five technical controls, CE+ includes an independent verification step. It therefore provides a higher level of assurance and is more suitable when client confidence or contractual requirements demand it.

Question 4

Why should organisations pursue Cyber Essentials certification?

Accepted Answer

Certification demonstrates practical cyber hygiene and boosts credibility. It is often mandatory for government contracts, helps with public trust, and may enhance eligibility for lower insurance premiums.

Question 5

How long does certification take?

Accepted Answer

Once you begin, you have six months to complete the assessment. The self-assessment can take about an hour, and most assessors issue results within 24 hours.

Question 6

What happens if I fail the assessment?

Accepted Answer

You receive detailed feedback at no extra cost. We support you until you pass, so there is no limit on reassessment attempts.

Question 7

How long is certification valid?

Accepted Answer

Both levels of certification are valid for 12 months and must be renewed annually to remain active in the certified organisations directory.

Question 8

Do you help clients after certification?

Accepted Answer

Yes. We offer ongoing services, including patching and monitoring, ensuring systems remain compliant year-round and simplifying future renewals.

Question 9

How do I define the scope of certification?

Accepted Answer

Scope refers to the part of your organisation in assessment—this can be your full company or a specific unit. We help you determine the most appropriate scope for your certification needs and ensure the certificate name correctly reflects that scope as part of our service.

Question 10

Can I use my own vulnerability scanner?

Accepted Answer

Yes—if it is PCI-approved. Otherwise, we will use our own scanner, which often reveals vulnerabilities you may miss.

Question 11

Are mandatory scans required for Cyber Essentials?

Accepted Answer

No scans are required for the basic self-assessment, but a signed declaration confirms the accuracy of your responses. CE+ includes both internal and external scans as part of the audit.

Question 12

How much does Cyber Essentials cost?

Accepted Answer

Pricing is based on organisation size and certification type. Please see our Pricing page for the latest breakdown.

Question 13

What about Cyber Essentials Plus pricing?

Accepted Answer

CE+ pricing varies depending on your environment and scope. Visit our Pricing page for full details.

Question 14

Are there "auto-fail" questions?

Accepted Answer

We work with you to ensure success. If you have unsupported software or systems, we will help you properly scope your assessment to exclude them or implement appropriate network segmentation. We provide guidance to address any evidence gaps rather than simply failing your assessment.

Question 15

Can we preview the questionnaire before paying?

Accepted Answer

Yes—you can download the self-assessment questions to prepare offline: PDF format or Excel format.

Question 16

Will I receive support if I am unsure of how to answer?

Accepted Answer

We provide full guidance throughout the process, including help with scope definition, completing the SAQ, and remediation.

Question 17

How many devices are tested during CE+?

Accepted Answer

Devices are selected based on build type and number. Assessor guidance on sampling varies by environment and build diversity.

Question 18

Do we need Cyber Essentials before moving to CE+?

Accepted Answer

Yes—you must pass the basic Cyber Essentials self-assessment before proceeding to CE+, ideally within three months.

Question 19

Can organisations outside the UK apply?

Accepted Answer

Yes. CE certification is available to non-UK organisations, provided the SAQ is valid within 90 days of applying for CE+.

Question 20

What is next for Cyber Essentials?

Accepted Answer

The scheme evolves regularly, with updates reflecting modern IT practices such as cloud services, MFA, and password policy changes. Future regulatory updates may further strengthen the scheme.

Question 21

Why choose us over other assessors?

Accepted Answer

We are committed to guiding you through every step of certification. You'll receive clear feedback, unlimited reassessment attempts within your package, and ongoing support—even after certification. Your success is our priority.

Frequently Asked Questions

General Questions

What is Cyber Essentials?

What is Cyber Essentials Plus?

What is the difference between Cyber Essentials and Cyber Essentials Plus?

Why should organisations pursue Cyber Essentials certification?

Process & Timeline

How long does certification take?

What happens if I fail the assessment?

How long is certification valid?

Do you help clients after certification?

Scope & Technical Requirements

How do I define the scope of certification?

Can I use my own vulnerability scanner?

Are mandatory scans required for Cyber Essentials?

Pricing & Certification Criteria

How much does Cyber Essentials cost?

What about Cyber Essentials Plus pricing?

Are there "auto-fail" questions?

Preparation & Support

Can we preview the questionnaire before paying?

Will I receive support if I am unsure of how to answer?

How many devices are tested during CE+?

Do we need Cyber Essentials before moving to CE+?

International & Future Trends

Can organisations outside the UK apply?

What is next for Cyber Essentials?

Our Approach

Why choose us over other assessors?

Still Have Questions?

Most Popular Questions

How long does certification take?

What's the difference between CE and CE+?

What happens if I fail?

Do I get support during the process?

Ready to Get Started?