Cyber Essentials Newcastle upon Tyne

Cyber Essentials certification for Newcastle upon Tyne organisations, assessed and issued by an appointed Certification Body rather than passed to a third party.

Cyber Essentials is a government-backed scheme covering five technical controls. It is a self-assessment, reviewed and certified by an assessor at a Certification Body. Solusec is one, which means the people who help you get the answers right are the people who assess them, and there is no handoff in the middle.

Government funding is open until March 2027

The Cyber Essentials First Step Fund opened on 3 November 2026 and gives eligible micro, small and medium-sized UK organisations 75 per cent off a first certificate, bringing the cost to between £80 and £125 plus VAT depending on size. It runs until the end of March 2027 or until the funding is exhausted, and it is allocated first come, first served.

Two things are worth knowing before you apply. The funding covers the assessment and, if you pass, the certificate. It does not guarantee a pass, so applying before checking your controls can spend a funded attempt on an assessment you were never going to clear. And it covers Cyber Essentials only, not Cyber Essentials Plus. Eligibility requires a UK organisation in the micro, small or medium bands that has not held Cyber Essentials in the previous four years. Applications go through IASME, and the discount still applies when you certify through a Certification Body of your choosing.

What certification involves

Five control areas: firewalls and internet gateways, secure configuration, user access control, malware protection, and security update management. You complete a question set covering each, we review it, and where an answer would not pass we tell you what to change before it is submitted rather than after.

Most of the work is not technical. It is establishing what is actually in scope, which is where organisations lose the most time. Every device that connects to the internet and is used for organisational work counts, including personal phones used for work email. Cloud services count. Home routers supplied by a member of staff’s broadband provider do not, although the device firewall on the laptop sitting behind it very much does.

Buy Cyber Essentials →

Where Newcastle organisations lose time

Two patterns account for most of the delay we see, and both are predictable enough to head off.

The first is unsupported software. A version of an operating system, a browser or an application that stopped receiving security updates, usually on one machine that nobody uses much. The scheme has no tolerance for it, and it cannot be argued around, so it is worth auditing before you start rather than discovering it in an assessor’s response.

The second is multi-factor authentication that is almost everywhere. Switched on across the organisation except for a shared mailbox, a legacy line-of-business application, or one person for whom it was inconvenient. Cloud services in scope need it on every account, and the exception is the thing that fails the submission.

Homeworking, and the control people forget

A large share of Tyneside office and contact-centre work is now split between the building and home, and that changes the scope rather than shrinking it. A laptop used at a kitchen table is in scope exactly as it is in the office.

The control most often missed is the software firewall on the device itself. In the office the question feels answered by the firewall at the edge of the building. At home there is no such comfort, so the device firewall has to be enabled and configured, and for a managed estate that is a policy setting rather than something asked of each member of staff.

If you supply the NHS, a council or a university

The North East’s large public sector employers increasingly require Cyber Essentials from suppliers, and the requirement has become more consistent since the Cyber Resilience Pledge began asking signatories to audit certification across their supply chains.

If a contract names Cyber Essentials, that is usually the whole requirement and the basic certificate answers it. If it names Cyber Essentials Plus, the audited level is a separate exercise with its own cost and timetable and the First Step Fund does not cover it. Send us the clause rather than working from a summary. The distinction decides both the price and the lead time, and it is wrong in a meaningful number of the briefs we are sent.

Insurance that comes with the certificate

Certification brings up to £25,000 of cyber liability insurance at no extra cost for UK organisations with a turnover under £20 million, provided the whole organisation is in scope and the cover is taken up at the point of certification. It is not a substitute for a proper policy if you carry real exposure, but it is included, and a surprising number of organisations certify without noticing it is there.

How long it takes

Where the controls are already in reasonable shape, days rather than weeks. Where they are not, the elapsed time is whatever it takes you to fix the gaps, which is why we look at the answers before submission rather than after. If you are working to a contract date, tell us at the first conversation. We also offer fast and urgent turnarounds where the date is genuinely immovable.

Cyber Essentials for Newcastle organisations

Being two hundred miles away changes nothing about this service. Cyber Essentials is a document and a conversation, and it has always been delivered that way regardless of where the client sits. You get a named assessor, a review before submission rather than a pass-or-fail verdict after it, and honest advice about whether the basic certificate is enough for what you have been asked to prove.