Before the audit
You must hold a current Cyber Essentials certificate, and the Plus audit normally has to be completed within three months of it. The scope for Plus should match the scope you declared for the basic certificate.
The tests
External vulnerability scan Your internet-facing IP addresses are scanned for known vulnerabilities and exposed services. Anything rated high or critical needs fixing.
Device sampling and patch checks The assessor selects a representative sample of devices of each type and operating system and checks that updates are applied and software is supported.
Malware protection tests Test files and email attachments are used to confirm that malware is blocked or detected, and that users are warned before running untrusted content.
Account checks The assessor confirms that MFA is in force on in-scope cloud services and that users do not work day-to-day with admin rights.
How to prepare
- Run your own vulnerability scan and fix the findings
- Push all outstanding operating system, browser and application updates
- Confirm endpoint protection and email filtering are active everywhere
- Check MFA enrolment for every user and admin
- Make sure your sample devices are available on the day
We do this preparation as a service. Compare the levels on our Cyber Essentials Plus page.
How Forever Systems helps you get certified
Most organisations fail Cyber Essentials for the same handful of reasons: unsupported operating systems left in scope, missing multi-factor authentication on cloud services, default passwords on routers, and patches that sit for weeks. We find those gaps before an assessor does.
- Readiness review of your devices, cloud services, firewalls and user accounts against the current question set
- Remediation: patching, configuration hardening, MFA roll-out, firewall changes and device management with tools such as Microsoft Intune
- Support through assessment with an IASME-licensed certification body, for both Cyber Essentials and Cyber Essentials Plus
- Staying compliant all year, so renewal is a formality rather than a scramble
Forever Systems Ltd is an IT and cyber security provider; we prepare you for certification and work alongside a licensed certification body, which issues the certificate.
Want to know how close you are to passing?
Talk to Forever Systems on 0333 358 3808 or send us an enquiry and we will come back to you with options, not a hard sell.
Call 0333 358 3808Send an enquiryFrequently asked questions
What happens if we fail part of the Plus audit?
Certification bodies usually allow a short window to fix and retest findings. Thorough preparation avoids that pressure.
How many devices are tested in Cyber Essentials Plus?
A sample, sized and selected by the assessor according to the number and types of devices in scope.