Cyber Intelligence & OSINT
Cyber Investigation
Digital Forensics
Compliance & Governance
Cyber Essentials
The government-backed baseline
Cyber Essentials shows customers and partners that you have the five controls that stop the most common attacks: firewalls, secure configuration, user access control, malware protection and security updates. It is required for many UK government contracts and is increasingly asked for in supplier questionnaires.
You complete an online questionnaire. We mark it, tell you plainly what needs fixing if anything falls short, and issue your certificate.
Two ways to do it
Assessment only. For organisations renewing, or confident their controls are in place.
Micro
1-9 employees
- Assessment by a licensed certification body
- Constructive feedback before final submission
- Cyber Essentials certificate
- £25,000 cyber insurance for eligible organisations
Small
10-49 employees
- Assessment by a licensed certification body
- Constructive feedback before final submission
- Cyber Essentials certificate
- £25,000 cyber insurance for eligible organisations
Medium
50-249 employees
- Assessment by a licensed certification body
- Constructive feedback before final submission
- Cyber Essentials certificate
- £25,000 cyber insurance for eligible organisations
Large
250+ employees
- Assessment by a licensed certification body
- Constructive feedback before final submission
- Cyber Essentials certificate
- £25,000 cyber insurance for eligible organisations
Want help preparing? With our Guided option, a consultant reviews your setup first, runs a gap analysis and helps you answer accurately. Contact us for a quote.
Cyber Essentials Plus
The same standard, independently tested
Cyber Essentials Plus adds a technical audit. An assessor tests a sample of your devices, checks your defences against malicious files and email, and runs internal and external vulnerability scans. Larger customers and public bodies often ask for Plus because it does not rely on self-declaration.
We carry out the audit remotely, so there is no site visit to arrange. If something fails, you get a clear remediation list and a 30-day window to fix and retest.
You must hold Cyber Essentials first, and complete the Plus audit within three months of it.
Defence Cyber Certification Level 0
The entry point to the defence supply chain
Defence Cyber Certification (DCC) is the Ministry of Defence's scheme for its suppliers, run by IASME and assessed against Defence Standard 05-138. Level 0 is the foundation level, for suppliers whose work carries a very low cyber risk. It covers three controls on top of Cyber Essentials.
Three things catch people out:
- It is not a self-assessment. Every DCC level is independently assessed, including Level 0.
- It covers your whole organisation. The scope is everything essential to running your business, not only the part that handles defence work.
- Your Cyber Essentials scope has to line up. Any internet-connected system in your DCC scope must also be covered by your Cyber Essentials certificate.
How we help
We are an IASME-approved DCC Certification Body for Level 0. We help you set your scope, get Cyber Essentials in place if you do not have it, and carry out your Level 0 assessment.
IASME Cyber Assurance
Security governance without the ISO 27001 price tag
Cyber Essentials covers your technology. IASME Cyber Assurance covers how you run security: risk assessment, staff training, policies, incident response, business continuity and data protection. It is designed for small and medium-sized organisations and is a practical step towards ISO 27001 if you need that later.
- Level 1 is a verified self-assessment. You answer the question set; we review it, give feedback and certify.
- Level 2 adds an independent audit of how your policies work in practice.
We can supply the supporting documents if you are starting from scratch: asset and access registers, security and password policies, joiner and leaver procedures, change control and data protection records.