Do I need Cyber Essentials?
A quick, honest guide to whether your business needs Cyber Essentials, and when it is worth having even if no one is asking for it yet.

A quick, honest guide to whether your business needs Cyber Essentials, and when it is worth having even if no one is asking for it yet.
The short answer
You need Cyber Essentials if a customer, contract, tender or insurer asks for it. Beyond that, most businesses benefit from it anyway, because it covers the five basic controls that stop the majority of common cyber attacks, and it proves to clients that you take security seriously.
You almost certainly need it if
a contract or tender you are bidding for requires it; you supply, or want to supply, central government or the MoD, where it is often mandatory; a client has made it a condition of working with you; or your cyber insurer asks for it before they will cover or renew you.
You should strongly consider it if
you hold customer or personal data, take payments, or simply want to show clients and partners that the basics are in place. Even with no external requirement, Cyber Essentials is an affordable, recognised way to prove it.
How to decide
Check your live contracts, any tenders you are chasing, and your insurance renewal for the words Cyber Essentials. If it is there, you need it. If it is not, weigh up the trust and protection it buys. We are happy to tell you straight on a quick call, with no hard sell.
Ready to buy?
Transparent, fixed pricing based on your organisation size. By default we give you access to the IASME portal to complete your Cyber Essentials assessment yourself, and once you submit it we aim to assess within one business day. You can preview the Cyber Essentials self-assessment questions to see where you stand first. There is no call or consultation as standard; we simply send you the questionnaire to complete. Your submission is reviewed by a qualified, certified assessor, never fed into AI. Need it faster? Add urgent turnaround below. Want us to review your setup against the controls before you apply? That is a gap analysis, quoted separately: ask for one using the contact button under the form.
An appointed IASME Certification Body: your certificate comes directly from us. Verify our credentials on the BlockMark registry, and find us listed on the IASME website.
Common questions
Is Cyber Essentials a legal requirement?
No, it is not a general legal requirement. It is often required contractually, and it is mandatory for some central government and MoD-linked contracts.
Do I need Cyber Essentials or Cyber Essentials Plus?
It depends on what is being asked for. Some contracts specify the hands-on Cyber Essentials Plus. Check the wording, and we can help you work out which you need.
How quickly can I get certified?
Often within days once your controls are in place. If you are up against a deadline, we can fast-track it.
Related
Need Cyber Essentials? Let’s get you certified.
Fixed price, direct from the Certification Body, often done in days.