10 of 16 anticipated CSRB requirement areas are not fully covered by Cyber Essentials. See where your baseline stands before the compliance window closes.
A 22-page regulatory diagnostic for UK MSPs who hold CE or CE+ certification. It maps 16 anticipated CSRB requirement areas against current CE/CE+ coverage, scores likely regulatory exposure against NCSC CAF v4.0, and provides a board-ready briefing you can act on the same day. Instant PDF download.
This is the benchmark score used in CSRB-BRIDGE for a CE/CE+-certified MSP against anticipated CSRB requirement areas, weighted against NCSC CAF v4.0. It reflects 10 material gaps and a baseline posture likely to attract regulatory scrutiny without further remediation. Committee Stage has now completed, so the overall direction of the framework is materially clearer.
(RED)
(AMBER)
(GREEN)
Score
Based on analysis of 16 anticipated CSRB requirement areas against CE and CE+ coverage, calibrated against NCSC CAF v4.0. RED items indicate areas where additional controls are likely to be needed before Royal Assent. Committee Stage completed on 25 February 2026, reducing the likelihood of major structural change to the framework used here.
-
1
Executive Readiness Snapshot 1-Page Board Summary · Exposure Score · Decision Triggers Single-page dashboard presenting your exposure score, critical gap count, estimated remediation window, and likely inspection pressure points. Designed to be handed to a director or presented at board level without further preparation.
-
2
CSRB Scope Test Confirm Likely Regulatory Exposure · Managed Service Provider Scope Assessment Step-by-step questions to determine whether your organisation is likely to fall within scope under the Bill. Includes the thresholds and service criteria DSIT is expected to apply based on the Bill's current direction.
-
3
16-Area CE/CE+ Gap Mapping RAG Status · CAF Objective · Coverage Analysis All 16 anticipated CSRB requirement areas mapped against CE and CE+ coverage. Each area shows what CE covers, what CSRB appears likely to add, current RAG status, and a priority action. The purpose is to show where certification ends and additional compliance work is likely to begin.
-
4
CSRB Exposure Score Weighted Diagnostic · CAF v4.0 Calibrated · Auditable Methodology A weighted scoring model across all 16 domains, calibrated against NCSC CAF v4.0 regulatory priority. CE/CE+ baseline: 24/100. Indicative inspection-ready threshold: 86/100. Every weight and score is visible in the diagnostic — nothing is treated as a black box.
-
5
10 Critical Gap Cards Individual Remediation Guidance · Effort Estimate · Priority Ranking One card per critical gap. Each card explains what the gap is, why CE does not sufficiently address it, what the likely regulatory expectation is, and what to do first. Prioritised by expected enforcement sensitivity and implementation effort.
-
6
Remediation Tracker Owner Fields · Deadlines · Evidence Notes Pre-populated with all 16 remediation actions. Add owner names, target dates, and evidence notes. The output becomes a documented remediation programme you can use internally and, if needed, show as evidence of progress.
-
7
Board Briefing Template Regulatory Context · Gap Summary · Recommended Actions A structured briefing document for senior leadership. Contains the regulatory context, your gap summary, exposure score, and a recommended action plan. Ready to complete and present without requiring legal or regulatory specialism.
-
8
90-Day Transition Plan Phased Implementation · Milestone Roadmap · Inspection-Ready Timeline Three-phase implementation roadmap taking you from gap assessment to stronger readiness. Designed to run alongside normal operations without a dedicated project team. Phases cover foundations, controls deployment, and evidence collation.
-
+
Bonus: 3 Client Email Templates Initial Awareness · Post-Call Follow-Up · Formal Report Delivery Three ready-to-brand emails covering the client conversation arc — from opening the discussion with CE-certified clients to formally delivering the gap analysis as a paid engagement.
22-page regulatory diagnostic PDF. Instant download. Includes 3 client email templates.
- 1 Payment completes securely at checkout.
- 2 PDF download link delivered to your email automatically after checkout.
- 3 Open the Executive Snapshot first — your score is on page 3.
- 4 Complete the Scope Test, review your gap cards, and assign owners in the Remediation Tracker.
Instant download — yours to keep. Deploy it at your own pace.
Ongoing Bill monitoring, updated gap cards as the legislation develops, CAF revisions, and email alerts on material amendments.
£97/month — cancel anytime.
Available as a post-purchase add-on — or view now.
Read the Snapshot. Review your Exposure Score. Assign owners to the critical gaps. Present the Board Briefing to leadership within 30 days.
Send Template 1 to CE-certified clients. Walk them through the key gaps. Deliver the completed diagnostic as a paid engagement using Template 3.
Your gap position changes as the Bill and CAF guidance evolve. CSRB-WATCH keeps your analysis current with a supervised monthly intelligence briefing and material amendment alerts.