0333 358 3808
Home › Certification process

The Cyber Essentials certification process, step by step

Certification is straightforward when the groundwork is done. Here is the route most organisations follow, and where we fit in.

Call 0333 358 3808Make an enquiry

1. Readiness check

Before you buy an assessment, find out where you stand. We review devices, operating system versions, cloud services, firewall and router settings, user accounts and malware protection against the current requirements. Our checklist is a good DIY starting point.

2. Fix the gaps

Typical work includes replacing or isolating unsupported devices, enabling multi-factor authentication, changing default passwords, setting up automatic updates, separating admin accounts, and enforcing device policies through tools such as Microsoft Intune.

3. Register and complete the questionnaire

You register with an IASME-licensed certification body and complete the online question set. Accuracy matters: answers must reflect what is in place today, and a senior person signs them off.

4. Assessment and certificate

An assessor marks your submission. Pass, and you receive your certificate and can use the Cyber Essentials badge. If something falls short you will be told what to fix. If you are going for Cyber Essentials Plus, the technical audit follows within three months.

5. Stay compliant

The controls only protect you if they stay in place. Keep patching, keep reviewing accounts, and plan your renewal before the year is up.

How Forever Systems helps you get certified

Most organisations fail Cyber Essentials for the same handful of reasons: unsupported operating systems left in scope, missing multi-factor authentication on cloud services, default passwords on routers, and patches that sit for weeks. We find those gaps before an assessor does.

  • Readiness review of your devices, cloud services, firewalls and user accounts against the current question set
  • Remediation: patching, configuration hardening, MFA roll-out, firewall changes and device management with tools such as Microsoft Intune
  • Support through assessment with an IASME-licensed certification body, for both Cyber Essentials and Cyber Essentials Plus
  • Staying compliant all year, so renewal is a formality rather than a scramble

Forever Systems Ltd is an IT and cyber security provider; we prepare you for certification and work alongside a licensed certification body, which issues the certificate.

Want to know how close you are to passing?

Talk to Forever Systems on 0333 358 3808 or send us an enquiry and we will come back to you with options, not a hard sell.

Call 0333 358 3808Send an enquiry

Frequently asked questions

What is the difference between Cyber Essentials certification and accreditation?

People use both words, but strictly the organisation is certified. Certification bodies are licensed by IASME to carry out the assessments.

Who are IASME?

IASME is the NCSC's Cyber Essentials Partner, responsible for delivering the scheme and licensing the certification bodies that assess applicants.

Can we check if a company is certified?

Yes. Certified organisations can be looked up on the public register of certificates published for the scheme.

More Cyber Essentials guides