The short answer
Cyber Essentials is a UK government-backed certification that shows your organisation has five basic technical security controls in place. It was launched in 2014 and is overseen by the National Cyber Security Centre, with IASME as its delivery partner.
What it protects against
The scheme targets common, low-skill attacks, the kind that scan the internet for weak passwords, unpatched systems and careless clicks. Getting the basics right removes a large share of that everyday risk.
The two levels
- Cyber Essentials: a verified self-assessment questionnaire
- Cyber Essentials Plus: the same controls, independently tested on your systems
Who needs it?
Suppliers to UK central government handling personal data or providing certain ICT services, organisations in supply chains that require it, and anyone who wants a recognised way to show customers they take security seriously. The requirements apply to organisations of every size.
How Forever Systems helps you get certified
Most organisations fail Cyber Essentials for the same handful of reasons: unsupported operating systems left in scope, missing multi-factor authentication on cloud services, default passwords on routers, and patches that sit for weeks. We find those gaps before an assessor does.
- Readiness review of your devices, cloud services, firewalls and user accounts against the current question set
- Remediation: patching, configuration hardening, MFA roll-out, firewall changes and device management with tools such as Microsoft Intune
- Support through assessment with an IASME-licensed certification body, for both Cyber Essentials and Cyber Essentials Plus
- Staying compliant all year, so renewal is a formality rather than a scramble
Forever Systems Ltd is an IT and cyber security provider; we prepare you for certification and work alongside a licensed certification body, which issues the certificate.
Want to know how close you are to passing?
Talk to Forever Systems on 0333 358 3808 or send us an enquiry and we will come back to you with options, not a hard sell.
Call 0333 358 3808Send an enquiryFrequently asked questions
Is Cyber Essentials the same as ISO 27001?
No. ISO 27001 is a broad information security management standard. Cyber Essentials is a focused technical baseline. Many organisations hold both.
Does Cyber Essentials cover staff training?
Not directly, but phishing is a key threat it aims to reduce, so security awareness training is a natural partner to certification.