"Do you hold Cyber Essentials?"
"No, but here's what we do."
That second line can be a good answer to a customer's security questionnaire, as long as it's honest and you can back it up.
The hard part is doing that for every question, consistently, with the evidence to hand. Answering each one from scratch eats into time you'd rather spend on the work itself. The fix is to write each answer once, with its evidence, and re-use it when the next questionnaire arrives.
This kit is for UK small businesses that get security questionnaires from customers, with or without Cyber Essentials. It's built around three sources of questions. They are the question areas in the NCSC's published supplier assurance questions, the five Cyber Essentials technical controls and the UK GDPR rules for processors. It comes with a dated sources list.
£39 · digital download (ZIP file).
FAQ
We don't hold Cyber Essentials. Is this still useful?
Yes. The walkthrough shows how to say so plainly, then describe what you do in each of the five areas Cyber Essentials covers.
Does it include policy templates?
No. It has a policy status tracker, so you can see which policies you have and when each was last reviewed. It also has a one-page security overview template.
What format are the files?
PDF, Word (.docx) and Excel (.xlsx). The workbook uses standard formulas only and has been tested in LibreOffice Calc. It should also open in Excel and Google Sheets. The Word templates have been checked in LibreOffice Writer.
What's inside
- Start here guide (PDF): how to set the kit up once, and what to do when a questionnaire arrives
- Question areas walkthrough (PDF): seventeen question areas. For each one, what the customer is usually asking, what an honest answer looks like and what evidence to keep
- Answer bank workbook (Excel): a row for each question with your status, your master answer and your evidence. Separate tabs hold an evidence log with renewal dates, a policy status tracker and a re-use log for each customer questionnaire
- One-page security overview (editable Word document): a short statement to send before a customer asks
- "No, but here's what we do" answer styles (editable Word document): how to answer honestly when the answer is no or partly, with fictional examples
- Before you send your answers (PDF): a one-page check
Everything in the download
A ZIP with 6 files: the Start here guide (PDF), the question areas walkthrough (PDF), the answer bank workbook (Excel), the one-page security overview (Word), the "No, but here's what we do" answer styles (Word) and the "Before you send your answers" check (PDF).
How it works
- Click Get the kit and check out. You'll receive a download link after payment.
- Open the Start here guide and fill in your answer bank and evidence log once.
- When a questionnaire arrives, use the walkthrough and your master answers to reply.
- Run the "Before you send" check, then save a copy of what you sent and update the re-use log.
Nothing here needs a conversation with Secordit.
What it isn't
Secordit Intelligence doesn't review, assess or certify anyone, and never sees your answers. The kit can't make you pass a questionnaire, win a contract or get Cyber Essentials. Your customer decides whether your answers are enough. Only an Assessor working for a body licensed by IASME can assess you for Cyber Essentials and issue the certificate.
General information, not legal advice.
Who we are
Secordit Intelligence was set up in February 2026 by Matthew Protheroe-Hill, its director. Before that, he co-founded Sencode Cyber Security and was a director there from 2019 to 2023. Qualification: BSc (Hons) Cyber Security & Networks (1st Class), Teesside University.
Delivery
Digital download (ZIP file). You'll receive a download link after payment.
Fill in the answer bank once, before the next questionnaire lands.
Secordit Intelligence's own product. Not made, checked or endorsed by the NCSC, the ICO, GOV.UK, the Cabinet Office, IASME or ISO. Contains public sector information licensed under the Open Government Licence v3.0: https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/