Do I Need Cyber Essentials for Government Contracts?

For many government and public sector contracts, Cyber Essentials is mandatory. Here is when you need it, and whether Cyber Essentials or Cyber Essentials Plus.

The rule for government contracts

Since 2014, central government has required suppliers who handle certain personal or sensitive information to hold Cyber Essentials. Where it applies, it is written into the contract or the tender, and you cannot be awarded the work without it.

Cyber Essentials or Cyber Essentials Plus?

Some contracts require the standard Cyber Essentials, others specify the hands-on, independently tested Cyber Essentials Plus. Always check the tender wording, and if you are not sure, we can help you work out which level you need.

MoD and defence supply chain

Defence work brings extra requirements. Suppliers in the MoD supply chain are increasingly asked to reach DCC Level 0, with Cyber Essentials as the prerequisite, alongside standards such as Def Stan 05-138.

Wider public sector

Beyond central government, the NHS, local government, education and many other public bodies commonly require Cyber Essentials from their suppliers.

How to be ready

The safest approach is to certify before you bid, so the certificate is in hand when the tender asks for it. If a deadline is already looming, we can fast-track your certification.

Ready to buy?

Transparent, fixed pricing based on your organisation size. By default we give you access to the IASME portal to complete your Cyber Essentials assessment yourself, and once you submit it we aim to assess within one business day. You can preview the Cyber Essentials self-assessment questions to see where you stand first. There is no call or consultation as standard; we simply send you the questionnaire to complete. Your submission is reviewed by a qualified, certified assessor, never fed into AI. Need it faster? Add urgent turnaround below. Want us to review your setup against the controls before you apply? That is a gap analysis, quoted separately: ask for one using the contact button under the form.

An appointed IASME Certification Body: your certificate comes directly from us. Verify our credentials on the BlockMark registry, and find us listed on the IASME website.

Business name

Business size

Telephone

Optional add-on

Tick it if you need it.

Urgent turnaroundMoved to the front of the queue and assessed same day where your submission arrives before midday. +£100

Total: select your size + VAT

Want a gap analysis, a different way to pay, or a question answered first?

Gap analysis. We review your setup against the controls you will be assessed on before you apply and tell you exactly what needs fixing, so nothing is a surprise when you submit. It is quoted against your setup rather than sold as a fixed add-on, so ask us and we will price it.

Anything else. Paying by card here is the quickest route, not the only one. Tell us how you would rather pay and we will sort it. Same if you want a question answered before you buy, or a quote for on-site Cyber Essentials or IASME Cyber Assurance Level 1.

Common questions

Is Cyber Essentials always required for government contracts?

Not always, but it is required whenever the contract involves handling certain personal or sensitive information, which covers a large share of public sector work.

Do I need Cyber Essentials Plus for government work?

Sometimes. The contract or framework will state whether the hands-on Cyber Essentials Plus is required rather than the standard certification.

Can I get certified in time for a tender?

Usually yes. If your deadline is tight, we prioritise your application and can fast-track it.

Do I need Cyber Essentials for government contracts?