What is Cyber Essentials?
Cyber Essentials is a UK Government-backed cyber security certification designed to help organisations of all sizes protect themselves against the most common cyber threats.
Developed by the National Cyber Security Centre (NCSC), the scheme focuses on five essential security controls that provide a strong foundation for protecting your systems, data, and people from cyber attacks.
Who Needs Cyber Essentials?
Cyber Essentials is suitable for organisations of all sizes and sectors, helping demonstrate that effective cyber security measures are in place. It is particularly valuable for:
Businesses bidding for UK Government contracts
where Cyber Essentials certification is often a requirement.
Organisations within regulated supply chains
that need to meet customer and industry security standards.
SMEs looking to demonstrate cyber maturity
and strengthen trust with clients, partners, and stakeholders.
Businesses handling personal, financial, or sensitive data
that want to reduce cyber risk and protect valuable information.
Any organisation seeking to improve its cyber resilience
and protect against common online threats.
Benefits of Cyber Essentials
-
Protect your business
against the most common cyber attacks
-
Build customer confidence
by demonstrating a commitment to security
-
Meet supplier requirements
for contracts and tender opportunities
-
Reduce the risk
of data breaches and costly downtime
-
Gain peace of mind
knowing essential security measures are in place
Protect your business
against the most common cyber attacks
Build customer confidence
by demonstrating a commitment to security
Meet supplier requirements
for contracts and tender opportunities
Reduce the risk
of data breaches and costly downtime
Gain peace of mind
knowing essential security measures are in place
Why Choose Cyber Essentials?
Cyber threats are a reality for every business, regardless of size, sector, or location. Most attacks are opportunistic, targeting organisations with basic security weaknesses that could have been prevented.
Cyber Essentials helps you put the right protections in place, reducing your risk and demonstrating your commitment to cyber security.
Ready to get certified?
Get in touch today for a friendly, no-obligation conversation and discover how we can help make your certification journey simple and successful.
The Five Cyber Essentials Controls
Cyber Essentials is built around five key technical controls that help strengthen your organisation's cyber security posture.
1. Secure Configuration
Configure devices and systems securely to minimise vulnerabilities and reduce opportunities for cyber criminals to gain access.
2. User Access Control
Ensure that only authorised users can access business systems and data, with permissions appropriate to their role.
3. Malware Protection
Protect your organisation from viruses, ransomware, and other malicious software through effective detection and prevention measures.
4. Security Update Management
Keep software, operating systems, and applications up to date to prevent attackers exploiting known vulnerabilities.
5. Firewalls
Use firewalls and network controls to create a secure barrier between your internal systems and external threats.
Cyber Essentials vs Cyber Essentials Plus
Both Cyber Essentials and Cyber Essentials Plus help organisations improve their cyber security and demonstrate their commitment to protecting data. The key difference is how certification is assessed.
Cyber Essentials
Cyber Essentials is a self-assessment certification. Your organisation completes a questionnaire covering the five Cyber Essentials technical controls, which is then independently reviewed by a certification body.
Ideal for organisations that:
- Want to establish a strong cyber security foundation
- Need to meet supplier or customer requirements
- Are taking their first step towards formal cyber security certification
- Require a cost-effective way to demonstrate cyber security compliance
Cyber Essentials Plus
Cyber Essentials Plus includes everything covered in Cyber Essentials, but with the addition of a hands-on technical audit carried out by a qualified assessor.
The assessment includes vulnerability testing and verification of the security controls you've implemented, providing independent assurance that your cyber security measures are working effectively.
Ideal for organisations that:
- Handle sensitive or confidential information
- Need higher levels of assurance for customers and stakeholders
- Operate within regulated industries or supply chains
- Want independent validation of their cyber security controls
At a Glance
| Feature | Cyber Essentials | Cyber Essentials Plus |
|---|---|---|
| Self-assessment questionnaire | Yes | Yes |
| Independent certification review | Yes | Yes |
| Demonstrates commitment to cyber security | Yes | Yes |
| Technical verification and testing | No | Yes |
| Vulnerability assessment | No | Yes |
| Provides independent assurance | No | Yes |
For many organisations, Cyber Essentials is the perfect starting point, providing a recognised benchmark of cyber security good practice. If you require additional assurance for customers, regulators, or contracts, Cyber Essentials Plus offers a higher level of certification through independent technical testing.
Cyber Essentials pricing
| Micro 1-9 | Small 10-49 | Medium 50-249 | Large 250+ |
|---|---|---|---|
| £320 | £440 | £500 | £600 |
(To be completed with 90 days of CE)
Cyber Essentials Plus pricing
| Micro 1-9 | Small 10-49 | Medium 50-249 | Large 250+ |
|---|---|---|---|
| £1,761 | £2,430 | £3,810 | POA |
At a Glance
For many organisations, Cyber Essentials is the perfect starting point, providing a recognised benchmark of cyber security good practice. If you require additional assurance for customers, regulators, or contracts, Cyber Essentials Plus offers a higher level of certification through independent technical testing.
Not sure which route is right for your organisation?
Our team can help you choose the certification that best fits your business requirements and compliance obligations.
For further information about the Cyber Essentials Certification scheme, please visit the official IASME guidance:
At Valantus, we are cybersecurity specialists and an IASME Approved Certification Body, delivering Cyber Essentials (CE), Cyber Essentials Plus (CE+), and DCC Level 0 and 1 certifications.
We believe certification shouldn’t be complicated. That is why we speak in plain English, cut through the jargon, and guide you through every step of the process.
Whether you are applying for certification for the first time or renewing an existing accreditation, our experienced team will help you understand what’s required, identify any gaps, and achieve certification with confidence.
Our goal is simple:
To make cybersecurity compliance straightforward, stress-free, and valuable for your business. By combining practical cybersecurity expertise with a supportive, hands-on approach, we help organisations strengthen their security, meet regulatory requirements, and build trust with customers and partners.
Simple advice. Expert guidance. Certification made easy.
Our Credentials
IS0 9001 and ISO 27001 certified
IASME Approved Certification Body (Cyber Essentials & DCC)
Authorised to certify organisations for DCC Level 0, 1
UK-based with extensive industry experience
Fully remote assessment capability
