When you're ready to apply for Cyber Essentials Basic, please choose your company's size and the package you need. This will allow you to make the payment and get access to the assessment portal. Remember, all your answers will need to be submitted online to complete the certification process.

Cyber Essentials Basic is essentially a self-assessment. You fill out a questionnaire, and if anything needs clarification, we might ask for a bit more detail. On the other hand, Cyber Essentials Plus usually includes a more in-depth technical audit, which can be done either remotely or onsite at your location. We use specialized scanning tools to identify any vulnerabilities in your external systems and services that could put your business at risk. Plus, we check that your essential software is properly secured. In short, the Plus Certification offers a higher level of assurance.

To obtain Cyber Essentials certification, your organisation must demonstrate effective security measures across five key areas:

• Secure internet connection
• Secure devices and software
• Control access to data and services
• Protect against malware
• Keep your software and devices up to date

Organisations need to complete a self-assessment questionnaire and may undergo an external vulnerability scan.

The duration of the Cyber Essentials certification process varies by organization. Typically, it can take anywhere from a few days to several weeks to prepare, complete the self-assessment, and address any necessary changes before submitting the certification. The actual review process itself usually takes about 2-5 business days.

Yes, there are two levels of Cyber Essentials certification:

Cyber Essentials: This is the basic entry-level certification, which involves a self-assessment and external vulnerability scan.

Cyber Essentials Plus: This is a more advanced level that includes all the requirements of Cyber Essentials but requires an independent assessment to verify that security controls are in place.

Organisations can access various resources to prepare for Cyber Essentials, including:

• The official Cyber Essentials guidance documents
• Government resources and toolkits
• Training and webinars offered by accredited certification bodies
• Cybersecurity consultancies that provide tailored assistance

Cyber Essentials certification is valid for one year. Organizations must go through the certification process annually to maintain their certification status.

Costs can vary widely based on factors such as the size of the organization and whether you choose to pursue Cyber Essentials or Cyber Essentials Plus. Generally, costs may include:

• Fees for external assessment and vulnerability scanning
• Optional consulting services if you require assistance to meet the standards
• Internal resources spent on preparation

To successfully achieve Cyber Essentials certification, avoid the following common pitfalls:

• Underestimating the preparation time required.
• Failing to involve key stakeholders from the start.
• Incomplete or inaccurate self-assessment submissions.
• Ignoring recommendations from vulnerability scans.
• Neglecting to keep software and devices regularly updated even after certification