Cyber Essentials Plus
Certification
Strengthen your cyber security defences with Cyber Essentials Plus certification. Cyber Essentials Plus is the next step up from the basic Cyber Essentials security standard and helps protect against up to 80% of common cyberattacks. Atema's expert support can help you achieve a first-time Cyber Essentials Plus pass, highlighting your commitment to cyber security and reassuring customers.
Speak to an expertNot sure if you need the full audit? If a self-assessment is enough for your business, Cyber Essentials might be all you need.
The highest level of the Cyber Essentials scheme.
Once you've achieved Cyber Essentials, you can move up to Cyber Essentials Plus, the highest level of the scheme. It involves an independent audit of your systems, verifying that your business is meeting all the security controls you identified during the Cyber Essentials self-assessment. That gives you a valuable stamp of approval when winning tenders and building credibility as a company that takes security seriously.
The same 5 fundamentals, independently verified.
Many businesses are already doing most of this, because it's good practice regardless of certification. These are the same five areas assessed for Cyber Essentials, this time verified by an independent auditor rather than self-assessed. We'll help make sure everything holds up when they look.
Update management
Keep software and operating systems up to date with the latest patches, fixing security weaknesses before attackers can exploit them.
User access
Employees only get access to the data they need, with special access privileges reserved for those who are authorised.
Firewalls & internet gateways
Firewalls provide vital protection against external threats, but only when they're correctly configured and switched on.
Secure configuration
Properly configured servers and devices close off vulnerabilities that online criminals could otherwise use to carry out unauthorised actions.
Malware protection
Protection against malware keeps sensitive data and documents safe, and your business protected from cybercriminals.
Why certify with us?
Atema helps businesses get Cyber Essentials Plus certification right first time. Here's why you should choose Cyber Essentials Plus from Atema.
The highest level of the scheme
Cyber Essentials Plus is independently audited, not just self-assessed, so you get real verification that your controls are working, not just a form filled in.
Protection that's actually been tested
The same five controls as Cyber Essentials, this time checked hands-on by an independent auditor rather than taken on your word.
Reassurance for your customers
A government-backed certification that shows clients and partners you take cyber security seriously, not just say you do.
An edge on tenders and contracts
Some tenders and supply-chain contracts specifically ask for Cyber Essentials Plus. Having it already in place is one less thing standing between you and the work.
Built to keep up with new threats
Recertifying every 12 months means your controls get checked against what's actually happening now, not what was true a few years ago.
Packages
Cyber Essentials Plus
Vulnerability Assessment
Find out if you meet Cyber Essentials Plus requirements without the pressure of the official assessment.
Cyber Essentials Plus
Certification
The standalone Cyber Essentials Plus audit resulting in a pass or fail outcome.
Cyber Essentials Plus
With Assured Pass
Unlimited practice scans and consultations with our assessments team to get you Cyber Essentials Plus compliant.
Everything in Certification, plus:
# The free £25,000 cyber insurance is underwritten by AXA, available for a UK-domiciled organisation with a turnover under £20m passing Cyber Essentials. Bigger cover is also available, underwritten by Hiscox.
* Assured pass assumes you follow our consultant's advice and ensure that all the required controls are put in place.
Our complementary security services.
Cyber Essentials Plus is often just one part of the picture. Here's what else we can help with.
Cyber Essentials
The self-assessment level of the scheme, and a prerequisite for Cyber Essentials Plus. A straightforward, affordable route to certification.
Cyber Insurance
Specialist cover underwritten by Hiscox, up to £1,000,000, with up to 10% off once you're Cyber Essentials certified.
Penetration Testing
We test your systems the way a real attacker would, monthly from £150 or as a one-off, then give you a clear report on what to fix and how.
Vulnerability Assessment
Monthly or annual scans that catch outdated software and missing patches before they're used against you, with a clear, prioritised report.
Cyber Essentials Plus, answered.
Still wondering something? Send us an enquiry below and we'll answer directly, no pitch attached.
Do I need Cyber Essentials before I can get Cyber Essentials Plus?
Yes. Cyber Essentials Plus builds directly on Cyber Essentials, so you'll need that in place first before moving up to the audited level.
How long does Cyber Essentials Plus certification last?
12 months, the same as Cyber Essentials. After that, you'll need to recertify to keep it current.
What happens if my business doesn't pass the audit first time?
The Certification package includes one free re-attempt, as long as it's taken within a month of the original assessment. With Assured Pass, follow our consultants' advice and put the required controls in place, and a pass is assured, so there's no re-attempt needed at all.
What's included in the Vulnerability Assessment package?
It's a way to check where you stand against the Cyber Essentials Plus requirements before committing to the official audit, without a pass or fail result attached. You'll get a full compliance and remedial report, a dedicated account manager, and guidance on what's needed to reach Cyber Essentials Plus. Certification itself isn't included.
What does the included cyber insurance cover?
Eligible businesses, UK-domiciled with a turnover under £20m, get up to £25,000 of free cyber insurance on passing Cyber Essentials Plus, included with the Certification and With Assured Pass packages.
Is Cyber Essentials Plus mandatory?
Not for most businesses, though it's increasingly requested for government and supply-chain contracts specifically because of the extra assurance the independent audit provides. Cyber Essentials alone is enough for most other purposes.
Want to ask a question or request a quote?
Tell us a bit about your business and we'll come back with the right package for you, or pick a time straight from our calendar.