Cyber Essentials, certified by us.
As an IASME Certification Body and NCSC Cyber Advisor, we don't just help you prepare for Cyber Essentials, we can assess and certify you too. That puts us on both sides of the process, which means expert guidance toward a first-time pass.
A recognised standard that opens doors.
Cyber Essentials is the UK government-backed baseline for cyber security. It's increasingly required to win public sector contracts and tenders, it reassures your clients and insurers, and it protects you against the most common attacks. Cyber Essentials Plus adds a hands-on technical audit for an even stronger mark of assurance.
Cyber Essentials, done properly, and certified by us.
As an IASME Cyber Essentials Certification Body and an NCSC Cyber Advisor Assessment Provider, we sit on both sides of certification: we help you prepare, and we can assess and certify you. That is rare, and it means expert guidance toward a first-time pass.
- Cyber Essentials & Cyber Essentials Plus
- Guided Support, pre-marking review & consultancy for a 'pass first time'
- Concierge Support, we lead the whole process end to end
- Tailored policy templates and evidence-gathering
From first gap to final certificate, we run it all.
We do not just point you at the questionnaire and wish you luck. We run the full certification process and self-assessment for you: a gap assessment to see where you stand, remediation to close anything that falls short, hands-on support to complete the self-assessment, then submission and certification. Review options mean the work is checked before it is marked, so you go in confident.
We run the full certification process and self-assessment, with review options, not just advice.
The five controls, handled.
Cyber Essentials is built on five technical controls, and Plus adds a hands-on audit. We handle all of it, and most of it is what we'd put in place as part of good IT anyway.
Firewalls
Properly configured boundary and device firewalls, so only the traffic that should reach your systems does.
Secure Configuration
Devices and software set up the secure way, default passwords removed, unnecessary features turned off.
Security Update Management
Operating systems and applications kept patched and supported, so known vulnerabilities get closed quickly.
User Access Control
The right people with the right access and nothing more, admin rights controlled and accounts managed properly.
Malware Protection
Effective, maintained protection against malware across your devices, configured to the standard's requirements.
Cyber Essentials Plus
The hands-on audit version, we carry out the technical verification and testing the Plus certification requires.
Trusted across every sector.
Frequently asked questions.
How much does Cyber Essentials certification cost?
Cyber Essentials starts from £420 + VAT for self-certification with basic support and tools. Two guided options are available: from £720 + VAT for full support through the process (including 2 hours of expert support), and from £1,420 + VAT for a comprehensive programme aimed at complex organisations (including a full day of support). All tiers include the certificate and cyber insurance of up to £25,000. Prices are 'from' figures because the exact cost depends on your staff count, and Cyber Essentials Plus is priced on request.
How long does Cyber Essentials take?
Most organisations achieve Cyber Essentials within 2 to 4 weeks. The exact timeline depends on how much remediation is needed first: if your systems already meet the five controls it can be quicker, and if gaps need closing we help you fix them before assessment. Priority fast-track certification is available on request for tighter deadlines.
What is the difference between Cyber Essentials and Cyber Essentials Plus?
Cyber Essentials covers five core controls (firewalls, secure configuration, security update management, user access control and malware protection), verified by a certification body. Cyber Essentials Plus adds a hands-on technical audit of your systems and is increasingly required to win public-sector contracts and tenders. PrimaryTech is an IASME Certification Body and an NCSC Cyber Advisor, so we certify you directly and guide you toward a first-time pass.
Which Cyber Essentials level do I need, standard or Plus?
Standard Cyber Essentials is a self-assessment: it demonstrates baseline security to clients and insurers and is often enough to meet a general requirement or tick a contract box. Cyber Essentials Plus goes further, adding an independent, hands-on technical audit of your systems, so it is genuine external verification that your defences actually work, not just a statement that they should. Plus is required for many public-sector and NHS contracts, but the stronger reason to choose it is reputation: it is the difference between saying you are secure and having that independently proven. If you are unsure, we will tell you what your contracts and clients require, and what your reputation genuinely warrants.
Do we need Cyber Essentials?
You are likely to need Cyber Essentials if you bid for public-sector contracts or tenders, or want to reassure clients and insurers about your security. It is a UK government-backed baseline standard and is increasingly a requirement rather than a nice-to-have. Many cyber insurance policies now expect it too.
What happens if we fail Cyber Essentials?
We help with resits after a fail. Because we offer a pre-marking review and guided support, the aim is to pass first time, but if remediation is needed we help you close the gaps and resubmit. With our Concierge option we lead the whole process end to end.
Ready to get certified?
Tell us where you are, whether that's starting from scratch or resitting after a fail, and we'll map the quickest route to a first-time pass. No jargon, no obligation.