← Solutions
CyberPopular

Cyber Essentials and Cyber Essentials Plus

Get certified to the UK government-backed scheme — often required for public sector and supply-chain contracts — with gaps fixed first.

Typical timing
2–6 weeks
Engagement
Fixed scope
Delivery framework
User researchDiscoveryAlphaBetaLive
Discuss this solutionCyber capability →

Objective

Achieve Cyber Essentials or Cyber Essentials Plus certification quickly and pass first time. The five technical controls protect against the most common internet attacks, and certification is required for many UK government contracts and increasingly by large customers.

You may need this if

  • A tender or customer contract requires Cyber Essentials
  • Cyber insurance premiums or terms depend on basic controls
  • You want a recognised baseline before going further
How it runs

Activities, step by step

The plan follows our delivery framework. Steps that do not apply to this kind of work are left out rather than padded.

  1. 02 · Discovery1 week

    Gap assessment

    • Scope defined: devices, cloud services and networks
    • Controls checked: firewalls, secure configuration, access, malware, patching
    • Gaps prioritised with fixes
  2. 03 · Alpha1–3 weeks

    Remediate

    • Configuration, MFA and patching gaps closed
    • Unsupported software removed or isolated
    • Evidence prepared
  3. 04 · Beta1–2 weeks

    Certify

    • Self-assessment submitted to a certification body
    • Plus: independent technical audit and vulnerability testing
    • Certificate issued
  4. 05 · LiveAnnual

    Stay certified

    • Controls monitored through the year
    • Annual recertification

Deliverables

What you keep at the end.

  • Gap assessment report
  • Remediated controls
  • Cyber Essentials or Cyber Essentials Plus certificate
  • Control-maintenance checklist

Outcomes

What it is built to change.

  • Eligibility for contracts that require certification
  • Protection against the most common attacks
  • A clear baseline for further security investment

Often combined with

Every engagement starts with a 45-minute working session with the SME who would own the work. No deck.

Discuss this solution