Cyber Essentials First Step Fund: 75% off certification for small and medium-sized organisations
The government's new First Step Fund takes 75% off a new Cyber Essentials certificate until the end of March 2027. Here's who it's for, what it covers and how PrimaryTech can help you apply.
Key facts
- 75% off a new Cyber Essentials certificate
- For micro, small and medium-sized organisations
- Runs until the end of March 2027, or until the funding runs out
- Delivered by IASME, the government's Cyber Essentials delivery partner
- Covers the assessment and, if you pass, certification; it doesn't guarantee a pass
- Source: the government's Cyber Essentials funding package, published 3 November 2026
What's been announced
On 3 November 2026 the government published its Cyber Essentials funding package. It has two parts: the First Step Fund, open to micro, small and medium-sized organisations, and the Pledge grant, for suppliers nominated by larger organisations. Both are delivered by IASME, the government's delivery partner for Cyber Essentials.
What the First Step Fund covers
The First Step Fund gives eligible organisations 75% off a new Cyber Essentials certificate. It covers the assessment and, if you pass, certification. It doesn't guarantee a pass. The fund runs until the end of March 2027, or until the funding runs out.
The Pledge grant
If one of your customers has signed the Cyber Resilience Pledge and nominates you as a supplier, you may be eligible for free Cyber Essentials certification and support from an NCSC-assured Cyber Advisor.
Why Cyber Essentials is worth having
Cyber Essentials checks five basic controls that stop the most common attacks: firewalls, secure configuration, user access control, malware protection and security updates. It's required for some government contracts, and more customers and insurers now ask for it.
"Most attacks on small organisations aren't sophisticated. They get in through an account without multi-factor authentication, a laptop that's missed its updates or a default password nobody changed. Cyber Essentials fixes exactly those things. With 75% off, there's never been a better time to close those gaps."
Mike Corlyon, Managing Director, PrimaryTech
How PrimaryTech can help
PrimaryTech is an IASME Certification Body and NCSC Cyber Advisor based in Hull. We check whether you're eligible, help you apply through IASME, find any gaps in your set-up before the assessment, help you fix them, and can assess and certify you too.
How to apply
Apply for Cyber Essentials funding through our website. It takes a few minutes, and we'll be in touch about the next steps. You can read more about how we help on our Cyber Essentials page. The funding is available until the end of March 2027 or until it runs out, so it's worth applying early.
Frequently asked questions.
What is the Cyber Essentials First Step Fund?
The First Step Fund is a government-backed scheme, delivered by IASME, that gives micro, small and medium-sized organisations 75% off a new Cyber Essentials certificate. It runs until the end of March 2027, or until the funding runs out. PrimaryTech can check your eligibility and help you apply.
Does the funding guarantee we pass Cyber Essentials?
No. The funding covers the assessment and, if you pass, certification. It doesn't guarantee a pass, which is why PrimaryTech checks your set-up and helps you fix any gaps before the assessment.
What is the Cyber Essentials Pledge grant?
The Pledge grant is a separate part of the government's funding package. It gives free Cyber Essentials certification and support from an NCSC-assured Cyber Advisor to eligible SME suppliers nominated by organisations that have signed the Cyber Resilience Pledge. PrimaryTech is an NCSC Cyber Advisor, so if you're nominated, we can provide that support.
Want advice specific to your organisation?
Articles are useful, but nothing beats a conversation about your actual setup. Start with a free health check.