The Cyber Essentials Scheme helps to guard your organisation and its supply chain from the most common types of cyber threats. Not only does the scheme help to protect your business, but it demonstrates your commitment to cyber security.
What is the Cyber Essentials scheme?
The Cyber Essentials scheme is a government-backed, industry supported scheme that helps businesses to protect themselves against the increased threat of cyber attacks. It provides clear advice on the basic controls organisations should have in place to protect themselves.
The scheme, which was developed and operated by National Cyber Security Centre (NCSC), was introduced to provide a safe internet space for organisations of all sizes, across a variety of all sectors.
What does Cyber Essentials cover?
There are five key areas which are covered by the Cyber Essentials scheme:
- Firewalls and routers – Creating a barrier between your IT network and other networks to check if incoming traffic should be allowed on your network.
- Software updates – Protect against potential vulnerabilities by keeping your devices up to date.
- Malware protection – Protect against viruses and other malware by using correctly configured anti-malware software.
- Access control – Manage access to administrator accounts to control who has access to your services and data.
- Secure configuration – Choose the most secure settings for your device by changing passwords and removing unused accounts.
Why become Cyber Essentials certified?
Becoming Cyber Essentials certified signifies that your organisation takes a proactive approach against cyber attacks and the threat of such. It also demonstrates to your customers, investors and insurers that you have taken the minimum and necessary steps to protect your organisation against cyber threats.
92% fewer insurance claims are made by organisations with the Cyber Essentials controls in place even if just one of the five controls is used.
How to get Cyber Essentials certified
Becoming Cyber Essentials certified is increasingly important for businesses.
Cyber Essentials is a recognised accreditation designed to help businesses strengthen their cyber security and reduce the risk of cyber attacks. There are different levels of certification, from the basic Cyber Essentials to Cyber Essentials Plus, which includes additional technical assessments including an external vulnerability assessment, an internal scan, mobile screenshots and user testing.
Detailed guidance on the process, requirements, and official resources is available online through the Cyber Essentials and IASME websites. Exploring these resources can help businesses understand the steps involved in certification and how it fits into their overall approach to managing cyber risk.

The benefits of becoming Cyber Essential certified
There are many benefits that come with being Cyber Essential certified, and listed below are just a few examples.
- Be listed on the NCSC’s database – One of the biggest benefits of becoming Cyber Essential certified is that your organisation will be listed on the NCSC’s website and database, showing suppliers your commitment to protecting your clients and organisations data.
- Work with the UK government and Ministry of Defence (MOD) – Cyber Essentials allows you to work with the UK Government and Cyber Essentials Plus will allow you to work with the MOD.
- Win new business – Becoming Cyber Essential certified will help to boost your reputation and attract new business opportunities by assuring your customers that you take cyber security seriously.
- Demonstrate supply chain security – Obtaining a Cyber Essential certification will help to demonstrate your commitment to data protection and cyber security.
- Prevent around a high percentage of attacks – By correctly implementing the basic areas covered by the Cyber Essentials scheme, you can reduce the impact of threats such as phishing attacks, malware, ransomware, password-guessing attacks and network attacks.
Why Cyber Essentials is important for businesses
Regardless of its size, every business is potentially exposed to cyber attack risks. Cyber security breaches can have a ripple effect throughout the entire supply chain, making it crucial for organisations to avoid being the weakest link. By assessing their threat profile and adopting appropriate measures, businesses can use Cyber Essentials to mitigate the risks of the most common cyber attacks by providing a strong base for businesses to work with.



