Cyber Essentials Plus
The same controls as Cyber Essentials, verified by a hands-on technical audit. We get you ready for it and support you through it.
Overview
Verified, not just declared.
Cyber Essentials Plus covers the same five controls as Cyber Essentials. The difference is that an independent assessor tests your systems directly instead of relying on a self-assessment.
That makes it stronger assurance for customers and partners, and a more demanding standard to pass. Cyber Essentials certification comes first.
A self-assessment tells you what you believe. A technical audit tells you what is true. Plus closes that gap.
Approach
First principles.
- 01
Test like the assessor
We check what the assessor will check, the way they will check it. No surprises on audit day.
- 02
Fix root causes
Patching one laptop passes a test. Fixing the process that left it unpatched keeps you passing.
- 03
Make it permanent
If the controls only work during the audit, they don't work. Build them into how you operate.
Scope
What's included
Readiness assessment
We check your systems the way the assessor will, so issues are found and fixed before the audit rather than during it.
Remediation
Fixing the configuration, patching, access and malware protection gaps found in the readiness checks.
Audit support
Support throughout the technical audit, from agreeing the scope to working through any findings.
Cyber Essentials first
If you are not yet certified to Cyber Essentials, we take you through that first as part of the same programme.
Engage