Cyber Essentials Scheme

The Cyber Essentials scheme provides businesses small and large with clarity on good basic cyber security practice. By focusing on basic cyber hygiene, your company will be better protected from the most common cyber threats.

Cyber Essentials is for all organisations, of all sizes, and in all sectors – we encourage all to adopt the requirements as appropriate to their business. This is not limited to companies in the private sector, but is also applicable to universities, charities, and public sector organisations.

Cyber Essentials is mandatory for central government contracts advertised after 1 October 2014 which involve handling personal information and providing certain ICT products and services.

The Cyber Essentials scheme has been developed as part of the UK’s National Cyber Security Programme and in close consultation with industry.

Cyber Essentials Levels

Cyber Essentials

Requires the organisation to complete a self-assessment questionnaire (SAQ) online. The responses are independently reviewed by an external certifying body (CB).

Cyber Essentials PLUS

The same requirements as Cyber Essentials with tests of the systems carried out by an external certifying body (CB), using a range of tools and techniques.