Cyber Essentials Plus
Certification
Strengthen your cyber security defences with Cyber Essentials Plus certification. Cyber Essentials Plus is the next step up from the basic Cyber Essentials security standard and helps protect against up to 80% of common cyberattacks. Atema's expert support can help you achieve a first-time Cyber Essentials Plus pass, highlighting your commitment to cyber security and reassuring customers.
Speak to an expertNot sure if you need the full audit? If a self-assessment is enough for your business, Cyber Essentials might be all you need.
The highest level of the Cyber Essentials scheme.
Once you've achieved Cyber Essentials, you can move up to Cyber Essentials Plus, the highest level of the scheme. It involves an independent audit of your systems, verifying that your business is meeting all the security controls you identified during the Cyber Essentials self-assessment. That gives you a valuable stamp of approval when winning tenders and building credibility as a company that takes security seriously.
What the auditor actually checks.
Cyber Essentials asks you to answer questions about your controls. Cyber Essentials Plus has an independent assessor test them hands-on. These are the checks they run, and we'll help make sure everything holds up before they do.
An outside-in scan
The assessor scans your internet-facing systems from outside, the way an attacker would, looking for exposed services and known weaknesses.
A patch check on real devices
A sample of your laptops, desktops and servers is scanned with proper credentials, to confirm high and critical updates really have been installed.
Test emails and downloads
Harmless test files are sent by email and downloaded in a browser, to prove your malware protection stops them rather than just being switched on.
Multi-factor sign-in
Your cloud services, such as Microsoft 365, are checked to make sure every user has to confirm their sign-in with a second step, not just a password.
Separate admin accounts
Everyday user accounts are checked for admin rights. Admin access should live on separate accounts, used only when it's actually needed.
Why certify with us?
Atema helps businesses get Cyber Essentials Plus certification right first time. Here's why you should choose Cyber Essentials Plus from Atema.
The highest level of the scheme
Cyber Essentials Plus is independently audited, not just self-assessed, so you get real verification that your controls are working, not just a form filled in.
Protection that's actually been tested
The same five controls as Cyber Essentials, this time checked hands-on by an independent auditor rather than taken on your word.
Reassurance for your customers
A government-backed certification that shows clients and partners you take cyber security seriously, not just say you do.
An edge on tenders and contracts
Some tenders and supply-chain contracts specifically ask for Cyber Essentials Plus. Having it already in place is one less thing standing between you and the work.
Built to keep up with new threats
Recertifying every 12 months means your controls get checked against what's actually happening now, not what was true a few years ago.
Packages
Cyber Essentials Plus
Vulnerability Assessment
Find out if you meet Cyber Essentials Plus requirements without the pressure of the official assessment.
Cyber Essentials Plus
Certification
The standalone Cyber Essentials Plus audit resulting in a pass or fail outcome.
Cyber Essentials Plus
With Assured Pass
Unlimited practice scans and consultations with our assessments team to get you Cyber Essentials Plus compliant.
Everything in Certification, plus:
# The free £25,000 cyber insurance is underwritten by AXA, available for a UK-domiciled organisation with a turnover under £20m passing Cyber Essentials. Bigger cover is also available, underwritten by Hiscox.
* Assured pass assumes you follow our consultant's advice and ensure that all the required controls are put in place.
Our complementary security services.
Cyber Essentials Plus is often just one part of the picture. Here's what else we can help with.
Cyber Essentials
The self-assessment level of the scheme, and a prerequisite for Cyber Essentials Plus. A straightforward, affordable route to certification.
Cyber Insurance
Specialist cover underwritten by Hiscox, up to £1,000,000, with up to 10% off once you're Cyber Essentials certified.
Penetration Testing
We test your systems the way a real attacker would, monthly from £150 or as a one-off, then give you a clear report on what to fix and how.
Vulnerability Assessment
Monthly or annual scans that catch outdated software and missing patches before they're used against you, with a clear, prioritised report.
Cyber Essentials Plus, answered.
Still wondering something? Send us an enquiry below and we'll answer directly, no pitch attached.
Do I need Cyber Essentials before I can get Cyber Essentials Plus?
Yes. Cyber Essentials Plus builds directly on Cyber Essentials, so you'll need that in place first before moving up to the audited level.
Is there a time limit between Cyber Essentials and Cyber Essentials Plus?
Yes. The Cyber Essentials Plus audit has to be completed within three months of your most recent Cyber Essentials certification. Miss that window and you'll need to pass Cyber Essentials again before the audit can go ahead, so it's worth planning both together. That three months also includes time to fix anything the audit turns up.
How long does Cyber Essentials Plus certification last?
12 months, the same as Cyber Essentials. After that, you'll need to recertify to keep it current.
What happens if my business doesn't pass the audit first time?
The Certification package includes one free re-attempt, as long as it's taken within a month of the original assessment. With Assured Pass, follow our consultants' advice and put the required controls in place, and a pass is assured, so there's no re-attempt needed at all.
What's included in the Vulnerability Assessment package?
It's a way to check where you stand against the Cyber Essentials Plus requirements before committing to the official audit, without a pass or fail result attached. You'll get a full compliance and remedial report, a dedicated account manager, and guidance on what's needed to reach Cyber Essentials Plus. Certification itself isn't included.
What does the included cyber insurance cover?
Eligible businesses, UK-domiciled with a turnover under £20m, get up to £25,000 of free cyber insurance on passing Cyber Essentials Plus, included with the Certification and With Assured Pass packages.
Is Cyber Essentials Plus mandatory?
Not for most businesses, though it's increasingly requested for government and supply-chain contracts specifically because of the extra assurance the independent audit provides. Cyber Essentials alone is enough for most other purposes.
Want to ask a question or request a quote?
Tell us a bit about your business and we'll come back with the right package for you, or pick a time straight from our calendar.