Cyber Essentials Plus, from scoping to certificate

Independent evidence that your basic cyber security controls are in place and working.

A recognised baseline your partners and suppliers can rely on.

Meet the security requirement when a tender or procurement process asks for it.

Support your bids for government and public sector contracts.

Evidence of the basic controls for your cyber insurance discussions.

A clear answer when a customer reviews the security of its supply chain.

Unsupported operating systems or software, and security updates that have not been applied.

Local administrator access and weak account controls across users and devices.

Accounts without multi-factor authentication where the requirement calls for it.

Inconsistent device configuration, endpoint security gaps, unmanaged devices and poorly configured firewalls.

Your users, devices, networks, cloud services and internet-facing systems: what the certification needs to include.

Your current controls checked against the Cyber Essentials requirements, for anything that could cause an issue at assessment.

A clear, practical list of the changes needed before assessment: what the issue is, what needs to change and why.

The required changes made with your internal IT team, your existing MSP or directly by us.

The environment reviewed again once the work is done, to catch anything that could still cause a problem.

We coordinate with an independent Cyber Essentials Plus assessor and stay involved throughout.

Once the assessment is completed successfully, the Certification Body issues your certificate.

Accounts, Conditional Access and multi-factor authentication set up to meet the requirement.

Windows device configuration, device compliance and patch management across your estate.

Endpoint security reviewed and remediated where the assessment needs it.

Administrator access limited to the people and devices that need it.

Firewall configuration and the way people access company data from outside the office.

The safest and most practical way to meet each requirement, without creating unnecessary disruption for users.

We help you prepare for the Plus technical assessment: we review the environment, identify any remaining gaps and help fix them before the assessor begins testing.

We can help with the whole process: scope, review, remediate, prepare, assess and certify, with the technical changes made to get you ready.

Tell us where you are and we will tell you what applies to your environment and what needs to happen next.

Worth noting the first-rate way in which the business of managing the commission was conducted. Straightforward, honest and willing to deal with issues swiftly and effectively made for a productive and enjoyable working relationship. Thank you!

The team at InfraTech Systems have been outstanding partners in delivering our digital objectives. Their technical expertise is matched by a flexible, can-do attitude that’s essential in a public sector environment. They’re responsive, approachable, and genuinely committed to service quality, always willing to adapt to our evolving needs while maintaining a high level of professionalism and accountability. A trusted and capable delivery partner.

Cyber Essentials Plus covers the same requirements as Cyber Essentials, with technical testing carried out by an independent assessor. The assessor checks that the controls you have declared are actually in place and working across a representative sample of your systems and devices.

Yes. Cyber Essentials is required before Cyber Essentials Plus, and the Plus assessment would normally be completed within three months of achieving Cyber Essentials.

Cyber Essentials is the UK Government-backed cyber security certification scheme developed by the National Cyber Security Centre. It focuses on five technical areas: firewalls, secure configuration, security update management, user access control and malware protection.

Either. We explain what needs to change, why it matters and what the effect will be. Where appropriate, we make the technical changes ourselves or work alongside your existing IT team or MSP.

An independent Cyber Essentials Plus assessor. We coordinate with them and stay involved throughout. If the assessor needs clarification, evidence or technical changes, we work with you to deal with them.

Certification proves a baseline. Our managed cyber security service is what keeps it true between assessments.