Our assessors are former New Scotland Yard digital forensic investigators. We understand cyber threats from the inside because we have spent years investigating their aftermath. That perspective informs every certification we deliver.
Every Cyber Essentials Plus package includes 12 months of continuous vulnerability scanning as standard. Under the updated v3.3 scheme, this is what good practice looks like. Most providers charge extra for it. We do not.
We do not charge for re-submissions or additional support calls during certification. Our clients have direct access to their assessor throughout the process. You will not be passed to a helpdesk.
Our team is headquartered at 15 Belgrave Square, central London. We work with UK-based organisations and international businesses operating in the UK market. All assessments are conducted remotely, making certification straightforward regardless of where your team is based.
Our free guidance tool helps you find the right Cyber Essentials solution and check your readiness before you certify. Answer a few questions about your situation and we will point you to the right starting point. It only takes a few minutes.
Guided self-assessment certification
IASME certification fee included
Guided self-assessment support
Unlimited support and retests during certification
Free security policy templates
£25k free cyber insurance for eligible UK organisations
Independent technical audit
Includes Cyber Essentials Plus audit
Remote technical assessment
External vulnerability testing
12 months vulnerability scanning included
Detailed compliance reporting
Both certifications + 12 months scanning
Includes all Cyber Essentials features
Cyber Essentials Plus technical audit
12 months vulnerability scanning included
Shared renewal date
Unlimited support and retests during certification
Not sure which is right for you? Compare solutions
All certifications are issued annually by Forensic Control, an authorised IASME Certification Body.
| Feature | Cyber Essentials From £450/year Entry level plan | Cyber Essentials Plus From £1,350/year Advanced features Requires CE first | Cyber Essentials Duo From £1,800/year Most popular plan Includes everything |
|---|---|---|---|
| Certification & scope | |||
| Cyber Essentials certification Baseline cybersecurity certification - IASME-issued certificate and badge | ✓ | Must be purchased separately | ✓ |
| Cyber Essentials Plus certification Independent technical audit by IASME-accredited assessor | — | ✓ | ✓ |
| IASME certification fee included £320 IASME fee included in price - no hidden extras | ✓ | ✓ | ✓ |
| Guided self-assessment questionnaire Forensic Control assessors review your answers before submission | ✓ | Only with CE purchase | ✓ |
| Security features | |||
| Protection against common cyber threats Covers the five NCSC controls: firewalls, secure configuration, access control, malware protection and patching | ✓ | ✓ | ✓ |
| Compliance with government security standards Required for many central government and MoD contracts | ✓ | ✓ | ✓ |
| Essential security controls implementation Baseline controls assessed and verified | ✓ | ✓ | ✓ |
| In-depth security assessment Deeper review of security posture beyond self-assessment | — | ✓ | ✓ |
| External vulnerability testing Remote scan of internet-facing systems | — | ✓ | ✓ |
| Internal vulnerability assessments Assessment of internal systems and network | — | ✓ | ✓ |
| 12 months vulnerability scanning included Ongoing external scanning at no extra cost throughout the year | — | ✓ | ✓ |
| Advanced security audits and testing | — | ✓ | ✓ |
| Detailed compliance reporting Written report of findings and compliance status | — | ✓ | ✓ |
| Enhanced protection and compliance Verified controls - not just self-declared | — | ✓ | ✓ |
| Increased protection against cyber threats Verified technical controls reduce attack surface | — | ✓ | ✓ |
| Support & extras | |||
| Unlimited support Access to Forensic Control's IASME-accredited assessors throughout | ✓ | ✓ | ✓ |
| Unlimited testing / retests No charge for resubmissions if you need to remediate | — | ✓ | ✓ |
| Free security policy templates Ready-to-use policy documents to support your submission | ✓ | ✓ | ✓ |
| £25,000 free cyber liability insurance Complimentary cover for eligible UK organisations with turnover under £20m* | ✓ | — | ✓ |
| What it helps with | |||
| Government supply chain contracts | ✓ | ✓ | ✓ |
| MoD and high-assurance contracts Ministry of Defence supplier requirements | — | ✓ | ✓ |
| Cyber insurance premium reductions Many insurers require CE as a minimum; Plus can reduce premiums further | ✓ | ✓ | ✓ |
| Select number of users | Buy now - £450 + VAT 1 to 9 users | Buy now - £1,350 + VAT 1 to 9 users | Buy now - £1,800 + VAT 1 to 9 users |
*Terms apply.
From choosing your route to certification, we guide you through every step.
Select Cyber Essentials, Cyber Essentials Plus, or our Duo package depending on your requirements. Not sure which? We will advise you for free.
We guide you through the IASME self-assessment questionnaire. Our assessors are available throughout your assessment.
Our IASME-accredited assessors review your submission and issue your certificate, typically within 2 working days. If we identify any non-conformities, we guide you through them at no extra charge.
Cyber Essentials Plus clients receive 12 months of continuous vulnerability scanning as standard. We will also send you a reminder before your annual recertification is due.
Meet client and regulator expectations on cyber security with certification that's recognised across the FCA-regulated sector.
Required by an increasing share of public-sector and tier-1 contractor frameworks. We make certification straightforward.
Demonstrate SRA-aligned security to clients, panels and cyber insurers, without disrupting how the practice operates.
Protect donor and beneficiary data with proportionate, affordable certification designed around how charities actually operate.
Mandatory for central government suppliers handling sensitive information. We've supported public-sector certification since 2017.
Cyber Essentials Plus is a condition of contract for many MoD frameworks. We have direct experience preparing defence suppliers for assessment.
5-star Google reviews from Cyber Essentials and Cyber Essentials Plus clients.
Highly recommend Forensic Control for anyone looking for a knowledgeable and supportive Cyber Essentials Plus audit partner.
From the very start of our CE+ journey, Jonathan was providing tremendous service to us in order to ensure we had all the necessary information and advice specific to our company.
Expert and friendly support towards our achieving Cyber Essentials Plus certification. Clearly laid out the expectations for meeting the standards and navigated us through.
Forensic Control were an excellent partner on our Cyber Essentials and Cyber Essentials Plus journey. They held our hand and counselled us through some seemingly insurmountable obstacles for a small firm.
This was our first time completing the certification. Jonathan outlined a clear, structured approach that gave me confidence straight away. Ross Southwell provided expert guidance throughout.
Forensic Control were exceptionally helpful and efficient all the way through the process, helping us to achieve Cyber Essentials Plus with minimum fuss.
We renewed our Cyber Essentials and Cyber Essentials Plus certifications with Forensic Control. They were professional, helpful and friendly throughout.
Cyber Essentials and Cyber Essentials Plus reviews
