Cyber Essentials Certification: The Complete Guide for UK Small Business 2026

What Is Cyber Essentials?
Why Every UK Small Business Should Care About Cyber Essentials
The Five Technical Controls Explained
Cyber Essentials vs Cyber Essentials Plus: What’s the Difference?
What’s Changing in April 2026? The v3.3 Update Explained
How Much Does Cyber Essentials Cost?
How to Apply: The Step-by-Step Process
How to Prepare for Your Cyber Essentials Assessment
Common Reasons Businesses Fail — and How to Avoid Them
Do You Actually Need Cyber Essentials?
How Long Does Cyber Essentials Take?
Choosing the Right Help for Your Cyber Essentials Journey
Frequently Asked Questions
Get Expert Help with Cyber Essentials in West Sussex

What Is Cyber Essentials?

Cyber Essentials certification is a UK Government-backed certification scheme, developed by the National Cyber Security Centre (NCSC) and managed by IASME. It was launched in 2014 with one simple goal: to help businesses protect themselves against the most common types of cyber attack.

The scheme is built around five core technical controls — practical security measures that, if implemented correctly, stop the vast majority of everyday cyber threats. It’s not about having the most sophisticated security setup in the world. It’s about making sure the basics are solid.

Since its launch, over 215,000 Cyber Essentials certification certificates have been awarded across the UK — to businesses, charities, schools, universities, and local authorities alike. It’s become the recognised baseline standard for cyber security in this country.

There are two levels of certification. Cyber Essentials is a self-assessment process where you answer questions about your security setup and an approved assessor reviews your answers. Cyber Essentials Plus goes a step further, with a hands-on technical audit of your actual IT systems to verify everything is in place.

Both levels cover exactly the same five controls. The difference is simply in how thoroughly your compliance is verified.

Why Every UK Small Business Should Care About Cyber Essentials

Let’s be honest — the words “cyber security certification” probably don’t get your heart racing. But here’s why this one actually matters for your business, even if you’re a small team with a handful of computers.

Cyber attacks target small businesses far more than people realise. The idea that hackers only go after big corporations is a myth. In fact, smaller businesses are often easier targets precisely because they tend to have weaker defences. According to the NCSC’s latest guidance, around 40–50% of UK small businesses experience some form of cyber attack every year. The average cost of a breach for a small business runs into thousands of pounds — and that’s before you factor in the hidden cost of downtime, reputational damage, and the stress of dealing with the aftermath.

It’s increasingly required for doing business. Cyber Essentials certification is mandatory for any business bidding for UK Government contracts that involve handling personal or financial data. Beyond Government work, more and more large organisations are now requiring their suppliers to hold Cyber Essentials certification as a condition of working with them. If you don’t have it, you could find yourself locked out of contracts and business relationships.

You get free cyber insurance. This surprises most people. When you achieve Cyber Essentials certification, you automatically receive cyber liability insurance worth up to £25,000 at no extra cost. For a small business, that’s a genuinely valuable safety net — and it alone can make the certification worthwhile.

It demonstrates to your clients that you take security seriously. In a world where data breaches make the news regularly, clients are increasingly asking about the security credentials of the businesses they work with. A Cyber Essentials certificate on your website is a simple, clear signal that you’ve been independently verified against a recognised standard.

It actually makes your business more secure. This sounds obvious, but it’s worth saying. Going through the Cyber Essentials certification process forces you to look honestly at your security setup, identify gaps, and fix them. Many businesses discover vulnerabilities they didn’t even know about. The certification process itself is one of the best free security audits available.

The Five Technical Controls Explained

The entire Cyber Essentials certification scheme is built on five technical controls. These aren’t arbitrary — they’re the specific measures that the NCSC has identified as most effective at stopping common cyber attacks. Let’s look at each one in plain English.

Secure Your Internet Gateway

This is about your firewall — the barrier between your internal network and the outside world. A properly configured firewall stops unauthorised traffic getting in and suspicious traffic going out. If you’re using a consumer-grade router from your broadband provider as your only protection, this is likely where you’ll need to make changes. A business-grade firewall, properly configured and kept up to date, is the first line of defence.

Secure Your Configuration

Most devices and software come with default settings that are designed to be convenient, not secure. Default passwords, unnecessary services running in the background, features you’ll never use left switched on — all of these create vulnerabilities. This control is about making sure every device and piece of software in your business is configured securely from the start, with only the features you actually need enabled.

Control Access to Your Systems and Networks

Not everyone in your business needs access to everything. A junior member of staff doesn’t need administrator access to your server, and they certainly don’t need to be able to install software on other people’s computers. This control is about making sure people can only access the systems and data they need to do their job — nothing more. It also covers things like strong passwords, removing access for people who leave the business, and making sure admin accounts are properly protected.

Keep Everything Up to Date

Software updates might feel like an inconvenience, but they’re one of the most important things you can do for your security. When software companies release updates, they’re often patching security vulnerabilities that attackers are actively trying to exploit. If you’re running outdated software, you’re essentially leaving the door unlocked. This control requires that all your software — operating systems, applications, browsers, everything — is kept up to date in a timely manner.

Protect Yourself from Malware

Malware is software designed to damage or gain unauthorised access to your systems. It includes viruses, ransomware, trojans, and a range of other nasty things. This control covers the measures you put in place to stop malware getting in and to detect it if it does — things like antivirus software, web filtering, email security, and making sure your staff know how to spot suspicious links and attachments.

Cyber Essentials vs Cyber Essentials Plus: What’s the Difference?

Both levels of Cyber Essentials certification cover exactly the same five controls. The difference comes down to how your compliance is verified.

Cyber Essentials is a self-assessment. You complete a detailed questionnaire about your security setup — answering questions about your firewall, your software, your access controls, and so on. An approved assessor reviews your answers to check they’re consistent and credible. If everything checks out, you’re certified. It’s the quicker, cheaper option, and it’s perfectly sufficient for the vast majority of small businesses.

Cyber Essentials Plus includes everything in the basic assessment, plus a hands-on technical audit. An assessor will actually test your systems — running vulnerability scans, checking your configurations, verifying that the controls you’ve described are genuinely in place. It provides a higher level of assurance and is worth considering if you’re working with Government agencies, handling particularly sensitive data, or want to demonstrate the highest level of commitment to your cyber security.

One important point: you must pass basic Cyber Essentials before you can go for Plus. And once you’ve passed the basic assessment, you have three months to complete the Plus audit. Miss that window and you’ll need to start the basic assessment again.

What’s Changing in April 2026? The v3.3 Update Explained

This is the section that matters most if you’re thinking about Cyber Essentials certification right now. On 27 April 2026, a new version of the Cyber Essentials requirements comes into effect — version 3.3, known as “Danzell.” Any assessment account created on or after that date will be judged against these updated standards.

The changes aren’t a complete overhaul, but there are several that will catch businesses out if they’re not paying attention. Here’s exactly what’s changing and what it means for you.

MFA Becomes Mandatory — No Exceptions

Multi-factor authentication (MFA) has been part of Cyber Essentials certification for a while now. But under the current rules, if you haven’t enabled it, you’ll get a warning — what’s called a “major non-compliance” — but you can still pass. That changes in April 2026.

From v3.3 onwards, if any cloud service you use offers MFA and you haven’t switched it on, you will automatically fail your assessment. Full stop. No exceptions. It doesn’t matter whether MFA is free or costs extra, whether it’s built into the service or available as an add-on — if it’s available, it must be enabled for all users.

This is the single biggest change in the update, and it’s the one most likely to catch people out. Think about every cloud service your business uses — email, file storage, accounting software, project management tools — and check whether MFA is switched on for every single user. If it isn’t, that’s your first priority.

Cloud Services Are Now Formally Defined — And Can’t Be Excluded

For the first time, v3.3 includes an official definition of what counts as a “cloud service” in the context of Cyber Essentials certification. The definition is broad: any on-demand, scalable service hosted on shared infrastructure and accessible via the internet that stores or processes data for your organisation.

In practice, this means that if your business uses any Software-as-a-Service (SaaS) tools — and almost every business does — those tools are now explicitly in scope for your assessment. You can’t leave them out. Microsoft 365, Google Workspace, Xero, QuickBooks, Salesforce, Slack — if you use it and it stores your data, it counts.

Scoping Rules Have Been Tightened

The previous version of the requirements used terms like “untrusted” and “user-initiated” to describe internet connections, which created confusion about exactly which devices and services needed to be included in your assessment. Those terms have been removed. Under v3.3, it’s much simpler: any device that connects to the internet — whether it initiates connections or receives them — is in scope.

If you’ve excluded any part of your IT infrastructure from your assessment in the past, you’ll now need to provide a written justification explaining what’s been excluded and why, along with evidence that it’s properly separated from the rest of your network. Vague exclusions won’t fly.

Passwordless Authentication Is Being Encouraged

The updated guidance actively promotes passwordless authentication methods — passkeys, biometrics, hardware tokens, and FIDO2 authenticators. The NCSC is pushing for these to become the default way of logging in, and while v3.3 doesn’t make them mandatory yet, they’re clearly the direction of travel. If you’re setting up new systems or upgrading existing ones, it’s worth building passwordless options in from the start.

Backups Have Been Elevated

The backup guidance has been moved much earlier in the requirements document — a deliberate signal from IASME about how important they consider this area. If your backup strategy is anything less than solid (regular automated backups, stored separately from your main systems, and actually tested to make sure they can be restored), this is worth addressing before your next assessment.

Application Development Has Been Expanded

The section previously called “Web Applications” has been renamed to “Application Development” and now references the UK Government’s Software Security Code of Practice. If your business develops any software in-house or uses custom applications, this is worth looking at in more detail. For most small businesses with off-the-shelf software, this won’t be a significant change.

What This Means for You Right Now

If you’re already certified and your renewal falls after 27 April 2026, you’ll need to meet v3.3 when you renew. If you’re thinking about getting Cyber Essentials certification for the first time, you can still register under the current (less demanding) standard before the deadline — any assessment account created before 27 April will use the existing questions. After that date, it’s v3.3 all the way.

The smartest move right now is to start preparing. Check your MFA situation across every cloud service you use. Make a list of all the cloud tools your business relies on. Review your backup processes. Do these things now, and the April changes will be a non-event when they arrive.

How Much Does Cyber Essentials Cost?

One of the most common questions, and one of the most reassuring answers. Cyber Essentials certification is genuinely affordable. Here’s the full picture.

The Assessment Fee

The base assessment fee is set by IASME and is tiered according to the size of your organisation:

Organisation Size	Cyber Essentials Fee (+ VAT)
Micro (1–9 employees)	From £320
Small (10–49 employees)	From £440
Medium (50–249 employees)	From £540
Large (250+ employees)	From £600

These fees cover the assessment itself — the questionnaire, the review by an approved assessor, and the certificate if you pass. There are no hidden charges, no penalty for failing, and you can resubmit if you need to make changes.

Cyber Essentials Plus

If you’re going for the Plus level, expect to pay significantly more for the technical audit component. Typical costs range from around £1,500 to £4,250 or more, depending on the size and complexity of your network. Most small businesses will fall in the £1,500–£2,500 range.

The Real Costs to Think About

The assessment fee is just one part of the picture. The bigger cost for many businesses is the time and effort — or money — needed to get your systems up to standard before you can pass. Common areas where businesses find themselves spending money include upgrading from consumer-grade IT equipment to business-grade alternatives, implementing proper backup solutions, purchasing enterprise antivirus software, and getting professional advice to make sure everything is configured correctly.

Think of it like an MOT for your car. The test itself is cheap. But if your car needs work before it’ll pass, that’s where the real spend happens. The good news is that for most small businesses, the gaps aren’t enormous — and fixing them tends to make the business genuinely more secure, not just “certified.”

The Free Insurance Makes It Worth It

As mentioned earlier, passing Cyber Essentials certification earns you automatic cyber liability insurance worth up to £25,000. For a small business, that’s a meaningful safety net, and for many it covers a significant chunk of the total cost of certification on its own.

Annual Renewal

Cyber Essentials certification is valid for 12 months. After that, you’ll need to renew — at roughly the same cost as the initial assessment. Build this into your annual budget from the start and it won’t come as a surprise.

Not sure where to start? We offer a free cyber security audit for businesses across West Sussex. We’ll tell you honestly where your security stands and exactly what you’d need to do to achieve Cyber Essentials certification. Book yours here, no obligation, no sales pitch.

How to Apply: The Step-by-Step Process

The application process for Cyber Essentials certification is straightforward. Here’s exactly how it works, from start to finish.

Step 1: Download the assessment questions. The full set of Cyber Essentials assessment questions is available for free from the IASME website. Download them and read through them before you do anything else. They’ll show you exactly what’s being asked and where you might need to do some work.

Step 2: Use the IASME Readiness Tool. IASME offers a free readiness tool that walks you through the requirements and helps you identify gaps in your current setup. It’s genuinely useful — take the time to use it before you start your assessment.

Step 3: Fix any gaps. This is where the real work happens. Go through the assessment questions, compare them against your current setup, and fix anything that doesn’t meet the requirements. This might take an afternoon or it might take a few weeks, depending on where you’re starting from. See How to Prepare for practical advice on how to prepare.

Step 4: Choose a Certification Body. You don’t apply directly to IASME. Instead, you apply through an approved Certification Body — a licensed cyber security company that conducts the assessment on IASME’s behalf. There are many to choose from, so it’s worth comparing what’s included in their pricing and what level of support they offer.

Step 5: Purchase your assessment. Once you’ve chosen a Certification Body, you’ll purchase your assessment online. You’ll receive login details for the secure assessment platform. From this point, you have up to six months to complete your assessment.

Step 6: Complete the assessment. Answer the questions in the online platform as accurately as you can. You can save your progress and come back to it. Before you submit, a senior person in your organisation needs to confirm that the answers are accurate.

Step 7: Wait for the review. Once submitted, a qualified assessor from your Certification Body will review your answers. This typically takes up to three working days. If they need clarification or spot anything that needs adjusting, you’ll be able to update and resubmit — with each resubmission also reviewed within three working days.

Step 8: Get certified. Once your assessment meets all the requirements, your Cyber Essentials certification is issued instantly. You’ll receive a digital badge that you can display on your website, in your email signature, or wherever else you like.

The whole process, from start to finish, typically takes between two and six weeks for a small business — longer if there are significant gaps to address beforehand.

How to Prepare for Your Cyber Essentials Assessment

Preparation is where most of the work happens — and where most of the time is spent. Here’s a practical checklist of the things to get right before you submit your Cyber Essentials certification assessment.

Firewall and network security. Make sure you have a business-grade firewall in place, properly configured and kept up to date. If you’re just using the router that came with your broadband, that’s not going to cut it. Check that unnecessary ports are closed and that your firewall is logging activity.

Software and updates. Go through every device in your business — computers, laptops, servers, phones, tablets — and make sure the operating system and all installed software is up to date. Set up automatic updates wherever possible. Pay particular attention to anything that hasn’t been updated in a while.

Passwords and access. Make sure every account uses a strong password (ideally 12 characters or more). Remove any accounts that are no longer in use — particularly for people who have left the business. Check that admin accounts are properly protected and not being used for everyday tasks.

MFA — especially important for April 2026. Go through every cloud service your business uses and switch on MFA wherever it’s available. This is non-negotiable under v3.3, and it’s one of the single most effective security measures you can implement. Microsoft 365, Google Workspace, your accounting software, your CRM — all of them need it switched on for every user.

Antivirus and malware protection. Make sure you have enterprise-grade antivirus running on every device. Consumer versions (the free ones that come with your operating system or a personal laptop) typically don’t meet the standard. Keep it up to date and make sure it’s actively scanning. If you’re not sure whether what you’re running is up to the job, our antivirus management service handles this for you.

Backups. Make sure you’re backing up your important data regularly — ideally daily — and that your backups are stored separately from your main systems (not just on the same computer). Critically, actually test your backups by restoring from them. A backup you’ve never tested is barely worth having.

Cloud services. Make a comprehensive list of every cloud service your business uses. Under v3.3, all of them are in scope, so you need to be able to account for them in your assessment. Check the security settings on each one and make sure they meet the requirements.

Documentation. Whilst Cyber Essentials certification doesn’t require extensive paperwork, having brief written records of your security measures, update schedules, and access policies will make the assessment process smoother and demonstrate that your security is managed, not just accidental.

Common Reasons Businesses Fail — and How to Avoid Them

Failing a Cyber Essentials certification assessment isn’t the end of the world — you can resubmit once you’ve made the necessary changes. But it’s better to get it right first time. Here are the most common stumbling blocks we see.

Outdated software. This is the number one reason. Businesses running old versions of Windows, outdated antivirus, or applications that haven’t been updated in months will fail on the “keep everything up to date” control. The fix is straightforward — go through everything and update it before you submit.
No proper firewall. Using a consumer broadband router as your only network protection won’t pass. A business-grade firewall, properly configured, is a basic requirement.
Shared passwords or weak passwords. If multiple people are using the same account, or if passwords are short and simple (the name of your dog, your birthday, “password123”), this will be flagged. Every user needs their own account with a strong, unique password.
MFA not enabled. This is going to become even more critical after April 2026. If you’re using cloud services and MFA is available but not switched on, that’s an automatic fail under v3.3.
MFA not enabled. This is going to become even more critical after April 2026. If you’re using cloud services and MFA is available but not switched on, that’s an automatic fail under v3.3.
Untested backups. Having backups in place is good. Having backups you’ve never actually restored from is significantly less reassuring. Test them.
Not understanding what’s in scope. Under v3.3, any device that connects to the internet and any cloud service that stores your data is in scope. If you try to exclude things without proper justification, you’ll run into problems.

Do You Actually Need Cyber Essentials?

Cyber Essentials certification isn’t compulsory for every UK business. But there are several situations where it’s either required or strongly recommended.

You work with the Government. If you bid for Government contracts that involve handling personal or financial data, Cyber Essentials certification is mandatory. Without it, your bid won’t even be considered.
Your clients or suppliers are asking for it. This is becoming increasingly common. Larger organisations are adding Cyber Essentials as a requirement for their supply chains. If a key client has asked whether you’re certified — or if you’re worried they might — getting certified puts you ahead of the game.
You handle sensitive data. If your business processes personal data (which almost all businesses do, under GDPR), client financial information, confidential business data, or anything else that would cause real harm if it fell into the wrong hands, Cyber Essentials certification provides a solid baseline of protection.
You want the free insurance. The automatic cyber liability insurance that comes with certification is a genuine perk, particularly for smaller businesses that might not otherwise have dedicated cyber insurance in place.
You simply want to know your security is up to scratch. Even if none of the above apply, going through the Cyber Essentials certification process is one of the best ways to get an honest assessment of where your security stands. Most businesses are surprised by what they find — and not always in a good way.

The short version: if you’re a UK small business handling any kind of sensitive data, Cyber Essentials certification is worth doing. The cost is modest, the benefits are real, and the process will make your business genuinely more secure.

How Long Does Cyber Essentials Take?

The timeline varies depending on how much preparation you need to do beforehand. Here’s a realistic breakdown.

If your security is already in good shape and you just need to go through the formal Cyber Essentials certification process, the whole thing can be done in as little as two to three weeks. Download the questions, work through them, submit, get reviewed, get certified.

If there are gaps to address — and there usually are, to some degree — add two to four weeks on top of that for preparation. This is where most of the time goes. Upgrading software, configuring your firewall, sorting out access controls, setting up MFA across your cloud services — these things take time to do properly.

For businesses starting from a very basic security position, the whole process from “we haven’t thought about this before” to “we’re certified” can take six to eight weeks. That’s not a long time, and it’s time well spent.

Once certified, remember that your Cyber Essentials certification is valid for 12 months. Renewal is typically quicker than the initial certification, because you’re not starting from scratch — you’re just demonstrating that the controls you put in place are still in place and up to date.

Choosing the Right Help for Your Cyber Essentials Journey

You can absolutely go through the Cyber Essentials certification process on your own — the assessment questions are free to download and the IASME resources are genuinely helpful. But many small businesses find that a bit of expert guidance makes the whole thing significantly smoother and less stressful.

Here’s what to look for when choosing someone to help.

An IT provider who actually understands Cyber Essentials. Not all IT companies are equal when it comes to this. Look for someone who has helped other businesses achieve certification, who understands the five controls inside and out, and who can translate the requirements into practical steps for your specific setup.

Someone local. Cyber Essentials isn’t just about ticking boxes on a form — it’s about making real changes to your IT systems. Having someone who can come on site, look at your actual setup, and advise you properly makes a big difference. Remote-only advice has its limits. If you’re not sure how to find a good local IT provider, our guide on how to find the right IT support company walks you through what to look for.
Cyber Essentials certified themselves. If your IT provider holds Cyber Essentials certification, that’s a good sign. It means they’ve been through the process, they know what’s involved, and they practise what they preach.
Transparent pricing. You should know exactly what you’re paying for before you commit. If a provider is vague about costs or tries to bundle Cyber Essentials with a long-term contract, that’s a red flag.
Someone who won’t just do it for you — they’ll help you understand it. The point of Cyber Essentials certificationisn’t to get a certificate on your wall. It’s to actually make your business more secure. A good IT provider will help you understand why each control matters and how to maintain it going forward, not just get you through the assessment.

Frequently Asked Questions

What are the five controls in Cyber Essentials? The five controls are: securing your internet gateway (firewall), secure configuration of your devices, controlling access to your systems, keeping everything up to date, and protecting yourself from malware. Each one addresses a specific category of common cyber threat.

Is Cyber Essentials mandatory? It’s mandatory for businesses bidding for certain UK Government contracts involving personal or financial data. For other businesses, it’s not legally required — but it’s increasingly expected by clients and supply chains, and it’s one of the most cost-effective ways to demonstrate your commitment to cyber security.

How much does Cyber Essentials cost for a small business? The base assessment fee starts at £320 + VAT for micro businesses (1–9 employees) and £440 + VAT for small businesses (10–49 employees). Cyber Essentials Plus, which includes a technical audit, typically costs £1,500–£2,500 + VAT for small businesses. You also get free cyber liability insurance worth up to £25,000 when you pass.

What’s the difference between Cyber Essentials and Cyber Essentials Plus? Both cover the same five controls. Cyber Essentials is a self-assessment reviewed by an assessor. Cyber Essentials Plus includes a hands-on technical audit of your actual systems to verify the controls are genuinely in place. Plus provides a higher level of assurance.

What’s changing in April 2026? The main changes in v3.3 are: MFA becomes mandatory on all cloud services that offer it (failure to enable it means an automatic fail), cloud services are formally defined and can’t be excluded from scope, scoping rules have been tightened, and passwordless authentication is being actively encouraged. See What’s Changing in April 2026 for full details.

Can I still get certified under the current rules before April 2026? Yes. Any assessment account created before 27 April 2026 will use the current version of the questions. If you register before that date, you can complete your assessment under the existing (less demanding) standard, even if you don’t finish until after April.

What happens if I fail my Cyber Essentials assessment? Nothing catastrophic. You’ll receive feedback on what needs to change, you can make the necessary adjustments, and resubmit. There’s no penalty for failing, and resubmissions are reviewed within three working days. Most businesses pass on their second or third attempt at most.

Do I need Cyber Essentials if I already have antivirus? Antivirus is one small part of the picture. Cyber Essentials covers five distinct areas of security — antivirus is just one element of one of those areas. Having antivirus is necessary but nowhere near sufficient on its own.

How often do I need to renew? Every 12 months. Your certificate expires after a year and you’ll need to go through the assessment again to renew. The good news is that renewal is typically quicker and easier than the initial certification.

Does Cyber Essentials cover GDPR compliance? Not directly. Cyber Essentials and GDPR are separate frameworks with different focuses. However, implementing the five Cyber Essentials controls will address many of the technical security requirements that GDPR places on businesses that handle personal data. It’s a solid foundation, but not a complete GDPR compliance solution on its own.

Is Cyber Essentials worth it for a very small business? Absolutely. The cost is modest, the free insurance alone can justify the expense, and the process will reveal security gaps you probably didn’t know about. Even a two-person business benefits from going through it.

Can my IT provider help me get Cyber Essentials? Yes — and it’s one of the best ways to approach it. A good IT provider who understands Cyber Essentials certification can help you identify gaps, fix them, and navigate the assessment process. Just make sure they actually know what they’re doing. Ask how many businesses they’ve helped get certified.

What’s a Cyber Advisor? A Cyber Advisor is someone assured by the NCSC to provide practical cyber security advice to small and medium businesses. They can help you prepare for Cyber Essentials certification and put the controls in place. Some offer a free 30-minute consultation — worth taking advantage of if you’re just starting out.

Get Expert Help with Cyber Essentials in West Sussex

If you’ve read this far, you’ve got a clear picture of what Cyber Essentials certification involves, what’s changing in April 2026, and what you need to do to prepare. The question now is whether you want to tackle it yourself or get some expert help along the way.

At ATS Connection, we’ve helped numerous Sussex businesses achieve Cyber Essentials certification — and we hold the certification ourselves. We know exactly where businesses get stuck, what the common pitfalls are, and how to get through the process as smoothly as possible.

Here’s what we can do for you:

Free Cyber Security Audit. Before you even start thinking about Cyber Essentials, we’ll assess your current security setup and tell you honestly where you stand. No obligation, no pressure — just a clear picture of what needs attention.
Preparation and Gap Analysis. We’ll go through the Cyber Essentials requirements against your actual systems, identify exactly what needs to change, and give you a prioritised action plan. No guesswork, no generic advice — specific recommendations for your business.
Hands-On Support. We can implement the changes for you — configuring your firewall, setting up MFA across your cloud services, upgrading your security software, sorting out your access controls. All the practical stuff that takes time and expertise to do properly. Find out more about our cyber security services.
Ongoing Managed Security. Once you’re certified, keeping your certification valid means maintaining the controls you’ve put in place. Our managed IT support monitors your systems continuously, keeps everything updated, and flags any issues before they become problems.

We’re based in Arundel with offices in Chichester, and we cover the whole of West Sussex, from Worthing and Littlehampton to Bognor Regis and beyond. We’re local, we’re Cyber Essentials certification holders, and we won’t charge you hidden fees or lock you into unnecessary contracts.

Ready to get started? Book your free cyber security audit today — or give us a call on 01903 255 159.

We’ll have a clear picture of where you stand within 24 hours, and a plan to get you Cyber Essentials certified without the stress.

Speak with an Expert