Who Needs Cyber Essentials?

Cyber Essentials is for any UK organisation that wants to prove it has the security basics right. Here is who needs it most often, and why.

Businesses bidding for contracts and tenders

Public sector buyers, and a growing number of private ones, require Cyber Essentials as a pass-or-fail condition. Without it, strong bids get marked down or excluded before anyone reads them.

Suppliers to government and the MoD

Cyber Essentials is frequently mandatory across the public sector supply chain, and defence suppliers face additional requirements such as DCC Level 0. If you supply, or want to supply, government, you almost certainly need it.

Businesses that handle customer or personal data

Law firms, accountants, healthcare providers, financial services and anyone holding personal data benefit from a recognised baseline, and clients increasingly expect it.

Anyone renewing cyber insurance

Insurers increasingly require Cyber Essentials as a condition of cover, or offer better terms when you hold it.

Schools, charities and small businesses

The same baseline applies, and the same benefits. Size is no protection from automated attacks, and Cyber Essentials is priced by organisation size so it stays affordable.

Ready to buy?

Transparent, fixed pricing based on your organisation size. By default we give you access to the IASME portal to complete your Cyber Essentials assessment yourself, and once you submit it we aim to assess within one business day. You can preview the Cyber Essentials self-assessment questions to see where you stand first. There is no call or consultation as standard; we simply send you the questionnaire to complete. Your submission is reviewed by a qualified, certified assessor, never fed into AI. Need it faster? Add urgent turnaround below. Want us to review your setup against the controls before you apply? That is a gap analysis, quoted separately: ask for one using the contact button under the form.

An appointed IASME Certification Body: your certificate comes directly from us. Verify our credentials on the BlockMark registry, and find us listed on the IASME website.

Business name

Business size

Telephone

Optional add-on

Tick it if you need it.

Urgent turnaroundMoved to the front of the queue and assessed same day where your submission arrives before midday. +£100

Total: select your size + VAT

Want a gap analysis, a different way to pay, or a question answered first?

Gap analysis. We review your setup against the controls you will be assessed on before you apply and tell you exactly what needs fixing, so nothing is a surprise when you submit. It is quoted against your setup rather than sold as a fixed add-on, so ask us and we will price it.

Anything else. Paying by card here is the quickest route, not the only one. Tell us how you would rather pay and we will sort it. Same if you want a question answered before you buy, or a quote for on-site Cyber Essentials or IASME Cyber Assurance Level 1.

Common questions

Do small businesses really need it?

Yes, often more than large ones. Most attacks are automated and hit whoever is exposed, and small businesses are frequently asked for it by clients and insurers.

Do sole traders need Cyber Essentials?

They can certify, and often do when a client or contract requires it. It is scoped and priced to suit the smallest organisations.

Is it only for technology companies?

No. Any organisation that uses computers, email or the internet can and often should certify.

Who needs Cyber Essentials?