Secordit home
Contact

What is Cyber Essentials?

Cyber Essentials is a government-backed UK scheme, developed by the experts at the NCSC. It sets a baseline of technical controls against common internet-based threats. The five controls are firewalls, secure configuration, security update management, user access control, and malware protection. This page explains the scheme. It does not award a certificate. 123

By Secordit. Last checked: 10 November 2026.

Go to the steps · All glossary terms

How it works

  1. An organisation assesses itself against the five technical controls, or is assessed at the Plus level. 12
  2. Cyber Essentials and Cyber Essentials Plus assess the same five controls. Plus adds independent testing that the controls work in practice. 12
  3. The NCSC names IASME as the delivery partner that manages a network of bodies which issue certificates. GOV.UK says that holding a current certificate enables a business to bid for government contracts that involve handling financial or personal data. 12

How it can look

GOV.UK and the NCSC publish the scheme overview and the current requirements. That includes the v3.3 requirements for IT infrastructure, dated 27 April 2026 on the NCSC resources page. 23

Warning signs

  • A message treats a Cyber Essentials certificate as the same thing as the CE mark used on products. 12
  • A seller claims that holding a certificate means an organisation cannot be attacked, or that reading this page is enough to pass an assessment. 1
  • A customer or contract asks for a current certificate, and the organisation has not checked what level is being asked for. 21

What to do now

  1. Read the NCSC overview and the current requirements if you are considering the scheme for an organisation. 13
  2. If a customer asks for a certificate, check whether they mean Cyber Essentials or Cyber Essentials Plus, and use the scheme's own process. 12
  3. Use the five controls as a practical checklist in any case: firewalls, secure configuration, updates, user access control, and malware protection. 1

UK reporting and support

  • For a live cyber attack in England, Wales or Northern Ireland, use Report Fraud. Telephone support is also available on 0300 123 2040. 45
  • In Scotland, call Police Scotland on 101. 78
  • If money has gone or banking details were shared, call your bank using the number on your card. Or use 159 if your bank participates. 6
  • If someone is in danger, call 999. 78

How to protect yourself

  • Work through the five technical controls, even if you are not applying for a certificate. 1
  • Keep security updates applied, control who has access, and keep malware protection and firewalls on. 13
  • Treat a certificate as a snapshot of those controls, not as a promise that an attack cannot happen. 1

Frequently asked questions

What is the difference between Cyber Essentials and Cyber Essentials Plus?

The NCSC says both assess the same five technical controls. Plus adds independent testing that the controls work in practice. 12

Does this page award a Cyber Essentials certificate?

No. Certificates are issued through the delivery partner network named by the NCSC. Secordit does not award a certificate, and this page does not imply the CE product mark. 12

Can a family apply for Cyber Essentials at home?

The scheme is for organisations. The five controls can still help a household think about firewalls, updates, access and malware protection, but the certificate process is aimed at organisations. 12

Matching kit

Cyber Essentials Questionnaire Prep Kit · £39 · Digital download.

A plain-English Danzell questionnaire walkthrough and workbook for UK small firms and sole traders. It is preparation only, and it does not award a certificate.

General information, not legal, financial or personalised security advice. Secordit is not a police or bank reporting service.

News Pulse

Account security, explained by email.

Read about News Pulse

Sources

  1. NCSC, Cyber Essentials overview | National Cyber Security Centre. Accessed 10 November 2026 (Europe/London).
  2. GOV.UK, Cyber Essentials scheme: overview - GOV.UK. Accessed 10 November 2026 (Europe/London).
  3. NCSC, Cyber Essentials resources | National Cyber Security Centre. Accessed 10 November 2026 (Europe/London).
  4. Report Fraud, Report Fraud. Accessed 10 November 2026 (Europe/London).
  5. Report Fraud, Guide to reporting cyber crime and fraud - Report Fraud. Accessed 10 November 2026 (Europe/London).
  6. Stop Scams UK, 159 Phone number - Stop Scams UK. Accessed 10 November 2026 (Europe/London).
  7. Police Scotland, How to report a crime - Police Scotland. Accessed 10 November 2026 (Europe/London).
  8. Report Fraud, Reporting cyber crime and fraud or phishing attempts - Report Fraud. Accessed 10 November 2026 (Europe/London).