Cyber Essentials certification, from a certifying body
Cyber Essentials is the Government-backed scheme that shows customers you take cyber security seriously. We are a certifying body, so we guide you through it and issue your certificate.
What is the Cyber Essentials scheme?
Cyber Essentials is a UK Government-backed, industry-supported scheme that sets out the basic cyber security measures every business should have in place. It is the foundation level of certification. source for the live-site claim that Cyber Essentials protects against "80% of the most basic cyber security breaches"; use only with a citation (NCSC)
Cyber Essentials Plus is the highest level. It adds more rigorous testing, including vulnerability tests by experts, to check your defences against basic hacking and phishing.
| Cyber Essentials | Cyber Essentials Plus | |
|---|---|---|
| What is checked | Your answers to a self-assessment questionnaire | A technical audit of in-scope systems |
| How | Questionnaire, reviewed by us before submission | External vulnerability assessment, internal scan and on-site assessment |
| Good for | Proving a basic level of security | Businesses that need higher levels of cyber security assurance |
| Valid for | 12 months | 12 months |
What does Cyber Essentials cover?
Access control
Limiting administrator access to the people who need it.
Software updates
Keeping software patched against new threats.
Firewalls and routers
A buffer zone that checks the traffic coming into your network.
Secure configuration
Strong settings, new passwords, and unused accounts and software removed.
Malware protection
Properly configured anti-malware, with only trusted applications allowed to run.
How certification works
1. Define the scope
We talk through your set-up and decide whether the whole business or a part of it is covered.
2. Self-assessment questionnaire
You complete it with our help. We review the application before it is submitted, and once it passes you receive your certificate. For Cyber Essentials, that is the end of the process.
3. On-site assessment (Plus only)
A technical audit that includes an internal vulnerability scan, tests of the in-scope systems and a check of your questionnaire.
4. External scan (Plus only)
An off-site scan of your internet-facing networks and applications.
5. Certification (Plus only)
Issued once the on-site assessment and external scan have been approved.
Why get certified?
Cyber Essentials was developed by the UK's National Cyber Security Centre (NCSC) and is recognised internationally. Certification lasts 12 months, so you renew each year to keep up with new threats.
- Win new business and strengthen your reputation.
- Show customers that cyber security is a priority for you.
- Open the door to UK Government work. Businesses without certification cannot apply for some of it.
- Open the door to Ministry of Defence work (Cyber Essentials Plus may be needed).
- Show your commitment to protecting data.
- Be listed on the certification register.
- Reduce the risk of the common attacks the scheme is designed to stop.
Our certifying-body status
The Unite Group is a Cyber Essentials certifying body based in Newcastle, working with organisations across the North East and UK-wide. Only certifying bodies trained and licensed by IASME, the organisation that delivers the scheme for the NCSC, can assess and issue certificates.
Our qualified Cyber Essentials practitioners manage the process from the first audit, through any remedial work, to the day your certificate is issued. Our support is offered at an affordable, fixed cost.
Our packages
Clear prices, based on the number of users. Every package includes an account audit, a technical audit, tailored policy documents, certification and remote support. confirm the billing basis (the live site says "monthly, plus VAT"), what "Up to £25K FREE cyber insurance" covers and its terms, and the Plus support hours (the live site shows 5 hours for up to 9 users and 3 hours above that)
| Package | Up to 9 users | Up to 25 users | Up to 49 users | 50+ users |
|---|---|---|---|---|
| Cyber Essentials renewal | £100 | £125 | £150 | Price on application |
| Cyber Essentials | £140 | £165 | £190 | Price on application |
| Cyber Essentials Plus | £305 | £330 | £355 | Price on application |
Cyber Essentials questions
Why get Cyber Essentials certified?
It gives you assurance that baseline measures against common threats are in place, shows customers that security matters to you, and opens doors to Government and Ministry of Defence contracts.
How long does it take?
It depends on how ready you are and how quickly the questionnaire is submitted. confirm timeline; live site says to expect a result within 14 days of submission for Cyber Essentials. Cyber Essentials Plus takes longer because of the technical scans.
Who carries out the assessment?
We can help you and assess you. Only certifying bodies trained and licensed by IASME can assess and issue certificates. confirm how Cyber Essentials Plus is delivered
Where can I display the certification mark?
On your website, email signatures, promotional material and letterheads. The mark is available through the IASME portal after a successful application, and you can display it for 12 months after passing.
Do I need Cyber Essentials as well as ISO 27001?
Some clients specifically ask for it, so often yes. Applying for both together is more efficient. If resources are tight, do Cyber Essentials first.
How do I get started?
Call us on 0191 466 1050 or send us a message. We will agree the scope with you and give you a fixed price.
Talk to us about Cyber Essentials
Call 0191 466 1050 or send us a message. We'll tell you which level fits and what it costs.