Cyber Essentials Plus
Independent, expert validation of your cybersecurity
Get the added assurance of expert validation for your cybersecurity systems. Leverage decades of experience to identify, fix and comply with Cyber Essentials Plus.
Cyber Essentials Plus is a Government-backed scheme, which requires external validation to ensure certification requirements are met.
CyberSmart is the UK’s leading Cyber Essentials certification body, delivering fast certification through expert validation, consultancy and testing.
Benefits
Independent audit
Our experienced auditors will take you through
the Cyber Essentials Plus Audit, providing expert
advice and guidance on how you can improve your
cybersecurity.
Vulnerability scanning
Our in-house vulnerability scanning service will
ensure that all device checks are verified and met.
External port IP configuration review
External port IPs will be reviewed for any gaps or
vulnerabilities and recommendations will be made
to remedy any potential weaknesses.
Email defence checking
Simulated email attacks will test your email
defences and ensure that your business’
critical information is protected from the most
common vector of attack.
Browser malware check
Verification of your browser’s ability to notify
of potential malware in downloads will
support you in the safe surfing of the internet.
Antivirus review
We will check that your antivirus software is set up
and working correctly, to ensure that viruses,
malware, and ransomware are detected, blocked
and removed.
MFA configuration
We run Multi-Factor Authentication tests on all listed Cloud Services, to demonstrate that your organisation has
multi-layer access security and that you comply with
Cyber Essentials Plus.
Reporting
Insightful status and stage icons ensure you know exactly where you are in the certification process, as well as what to do next. In addition, Smart Score reporting surfaces your level of risk and what you can do to mitigate it.
Unlimited attempts and support
By default, we offer our customers unlimited attempts to achieve certification at no additional cost. So whether it’s your first or your hundredth time, you get access to the same level of support and care from our UK-based team of IASME-accredited auditors.
Digital certificate of completion
Prove your cyber credentials with a digital certificate
of completion and utilise our badges in your
marketing materials to demonstrate your
commitment to security.
Awards
But don’t just take our word for it, here’s what the industry has to say;
Security Vendor of the Year – SME
Computing Security Excellence Awards
Cyber Security Vendor of the Year
Technology Reseller Awards
Tech Growth Business of the Year
National Technology Award
CyberTech 100
2023
Global List
Accreditations
What our customers say
5,000+ businesses around the UK trust CyberSmart to deliver
Complete Cyber Confidence
Resources
Is Cyber Essentials Plus right for my business?
Blog
What to expect from a Cyber Essentials Plus audit
Blog
How to encourage continuous security improvement in your supply chain
Blog
Frequently asked questions
Cyber Essentials Plus is a UK Government backed scheme, which ensures businesses implement a set of basic technical controls to protect themselves against common threats, which are audited by a third party. Cyber Essentials Plus is suitable for all organisations, of any size, in any industry.
The 5 technical controls are:
- Firewalls
- Secure configurations
- Applying access controls
- Anti-Malware measures
- System maintenance
Certification can be achieved in as little as 24 hours and only requires 4 steps.
1. Once you have purchased a Cyber Essentials subscription, you will be given access to our platform where you can input your evidence for the controls. Helpful tips and guidance will also be provided to support your application submission.
2. The next step is submitting your application. If you are unsure as to whether you’ve provided the right information, our experts are available on live chat for support or, alternatively, you will receive feedback on each failed check at step three.
3. One of our IASME accredited auditors will review your application and for any failed checks, will provide what steps need to be taken in order to fix them.
4. Once you have passed all your checks and a successful submission has been made, you will be provided with a digital certificate of completion as well as badges to be used in your marketing materials. You will also be added to IASME’s database of certified organisations, should your partners or customers want to verify it.Not for CyberSmart customers. Our experts have many decades of experience running certification audits and our proprietary software is purpose-built for Cyber Essentials and Cyber Essentials Plus certification.
CyberSmart operates a yearly rolling subscription. This is to ensure that you never miss your re-certifcation deadline or open yourself up to attacks.
Set V14 (Montpellier)
Yes. It is highly advised that any company doing business in the UK, even if they are based overseas, should get both Cyber Essentials and Cyber Essentials Plus certification. Not only does it demonstrate a commitment to security, but also many business contracts in the UK require organisation’s to have these certifications in order to do business.
There are no known downsides to Cyber Essentials Plus and additional certifications can be used in parallel with it. However, it is highly advised that businesses take out products such as Active Protect, which scans your devices and software daily for any vulnerabilities and misconfigurations. It also comes with training and policy management which should reduce the likelihood of a breach.