What Is Cyber Essentials Plus?

Cyber Essentials Plus is the highest level of Cyber Essentials certification. It provides independent technical verification that your organisation’s cyber security controls are operating effectively and protecting against common cyber threats.

Unlike standard Cyber Essentials, Cyber Essentials Plus includes testing by an independent assessor, providing greater assurance to clients, suppliers, insurers and procurement teams.

Book Free Security Review Cyber Essentials Plus Support
Cyber Essentials Plus Certification

Cyber Essentials Plus Explained

Cyber Essentials Plus builds upon the Cyber Essentials certification scheme by introducing independent technical testing. This means your organisation’s security controls are verified in practice rather than solely through a self-assessment questionnaire.

Cyber Essentials Plus demonstrates that your organisation has not only documented security controls but has also proven they work through independent testing.

Cyber Essentials vs Cyber Essentials Plus

Feature Cyber Essentials Cyber Essentials Plus
Assessment Self Assessment Independent Verification
Technical Testing No Yes
Device Verification No Yes
Assurance Level Good Excellent
Suitable For Most Businesses Businesses Requiring Higher Assurance

What Is Tested During Cyber Essentials Plus?

Firewall Protection

Verification that firewalls and boundary protections are operating correctly.

Secure Configuration

Testing systems to confirm secure settings and reduced attack surface.

User Access Controls

Verification of user permissions, administrator access and account management.

Malware Protection

Review of anti-malware controls and endpoint protection.

Security Updates

Verification that supported systems are fully patched.

Authentication Controls

Review of password security and Multi-Factor Authentication controls.

Benefits of Cyber Essentials Plus

  • Win contracts requiring higher security assurance.
  • Demonstrate stronger cyber security controls.
  • Increase client confidence and trust.
  • Reduce exposure to common cyber threats.
  • Support cyber insurance applications.
  • Meet supplier security requirements.
  • Improve Microsoft 365 security posture.
  • Strengthen access control and governance.

Why Businesses Choose Cyber Essentials Plus

Competitive Advantage

Stand out during tenders, procurement and supplier reviews.

Client Trust

Demonstrate independently verified security controls.

Reduced Risk

Identify weaknesses before attackers exploit them.

Security Culture

Promote stronger cyber security practices across the business.

Governance

Support security, compliance and risk management objectives.

Supply Chain Assurance

Increase confidence among clients and suppliers.

How AceGuard Helps

Cyber Essentials Plus Preparation

Readiness reviews and certification support.

View Service →

Cyber Essentials Support

Prepare for initial certification.

View Service →

Cyber Security Audits

Identify gaps before assessment.

View Service →

Microsoft 365 Security Assessment

Review cloud security controls.

View Service →

Identity & Access Management

Strengthen authentication and user access.

View Service →

Vulnerability Assessments

Identify weaknesses before certification.

View Service →

Common Reasons Businesses Fail Cyber Essentials Plus

  • Multi-Factor Authentication not enabled.
  • Inactive user accounts.
  • Excessive administrator privileges.
  • Unsupported operating systems.
  • Unpatched devices.
  • Weak password policies.
  • Poor Microsoft 365 configuration.
  • Inadequate malware protection.

Cyber Essentials Plus for Different Industries

Frequently Asked Questions

Is Cyber Essentials Plus worth it?

Yes. It provides a higher level of assurance through independent testing and can strengthen trust with clients and suppliers.

Do I need Cyber Essentials first?

Yes. Cyber Essentials certification is required before progressing to Cyber Essentials Plus.

How long does Cyber Essentials Plus take?

Preparation time varies depending on your existing security controls and any remediation work required.

Does Cyber Essentials Plus include Microsoft 365?

Microsoft 365 security controls are frequently reviewed as part of preparation and readiness activities.

Ready for Cyber Essentials Plus?

Strengthen your cyber security, improve client confidence and prepare for independent technical verification with AceGuard.

Start with a free Cyber Security Health Check and discover how close your organisation is to Cyber Essentials Plus readiness.

Book Free Cyber Security Health Check