Cyber Essentials provides a recognised, government backed framework that helps organisations protect themselves against common cyber threats, demonstrate their commitment to cyber security and build confidence with customers, suppliers and stakeholders.
Cyber Essentials Plus includes all the requirements of Cyber Essentials but takes assurance one step further through an independent technical assessment.
Cyber Essentials provides a recognised, government backed framework that helps organisations protect themselves against common cyber threats, demonstrate their commitment to cyber security and build confidence with customers, suppliers and stakeholders.
Cyber Essentials Plus includes all the requirements of Cyber Essentials but takes assurance one step further through an independent technical assessment.
Partners who help us deliver our fantastic service
Partners who help us deliver our fantastic service
Clear guidance without the jargon.
Practical gap analysis to identify security weaknesses.
Straightforward, practical remediation advice.
Guidance throughout your certification journey.
Get your systems and users ready for testing.
Improve your wider cyber security, not just compliance.
Ongoing advice as cyber threats evolve.
Clear guidance without the jargon.
Practical gap analysis to identify security weaknesses.
Straightforward, practical remediation advice.
Guidance throughout your certification journey.
Get your systems and users ready for testing.
Improve your wider cyber security, not just compliance.
Ongoing advice as cyber threats evolve.
“I wish to take this opportunity to say a huge thank you for many years of amazing IT support from Intrasource, it has always been greatly appreciated. An excellent team of professional, efficient, helpful, and always polite people. To my many friends & ex-clients in Hull I shall continue to sing your praises and strongly recommend your engagement to them.”
“I wish to take this opportunity to say a huge thank you for many years of amazing IT support from Intrasource, it has always been greatly appreciated. An excellent team of professional, efficient, helpful, and always polite people. To my many friends & ex-clients in Hull I shall continue to sing your praises and strongly recommend your engagement to them.”
“Intrasource now provide Derede with a comprehensive IT support package which enables our business to function efficiently. It gives me the confidence to leave all IT matters in their hands so I can grow my business.”
“Intrasource now provide Derede with a comprehensive IT support package which enables our business to function efficiently. It gives me the confidence to leave all IT matters in their hands so I can grow my business.”
We have been protecting business networks and data for over 26 years, and we hold Cyber Essentials Plus and ISO 27001 ourselves. That matters, because we are not asking you to do anything we have not done. We know which questions cause trouble, where organisations usually fall short, and how to close those gaps without disrupting how your people work. You get clear guidance, a practical list of what needs fixing, and someone on the end of the phone throughout.
Cyber Essentials is a scheme created by the National Cyber Security Centre and delivered by the IASME Consortium. It covers five technical controls that protect against the most common internet-based attacks affecting UK businesses.
Cyber Essentials is a self-assessment, reviewed and verified by a qualified assessor. Cyber Essentials Plus covers the same five controls, but an independent assessor tests them hands-on rather than taking your word for it. Both certificates last 12 months.
Most organisations start looking at Cyber Essentials because someone has asked them for it, but the benefits go well beyond ticking that box. Certification opens doors, answers awkward questions from customers and insurers, and leaves your business genuinely harder to attack.
Certification lasts for twelve months. After that you’ll need to recertify against the question set, which is periodically updated as the scheme evolves.
The assessment itself doesn’t take long, but remediation sets the real timeline. If you need to make changes before you can certify, the timescale depends on how quickly you can make them. That’s why we start with a gap analysis to tell you where you stand.
Not for every business, but if you deal with or want to bid for central government contracts, or supply the Ministry of Defence, then it is mandatory. In the private sector it’s case by case. Some customers ask for it, some don’t. For most organisations it becomes mandatory the moment one of them does.
Yes. IASME publishes the full question set free of charge, and we’ll talk you through it so you know exactly what’s being asked before you commit to anything.
No. You can certify a defined part of your business, as long as it’s properly separated from the rest of your network. Getting this right at scoping matters, because a scope that doesn’t hold up causes problems at assessment.
You’ll get feedback explaining which answers fell short, then two working days to fix the issues and resubmit at no extra cost. Miss that window and you’ll need to reapply and pay again. However, that’s exactly what our gap analysis helps avoid, and as long as our recommendations are followed there is no reason you should fail.
Not for the basic level, which is a self-assessment verified by a qualified assessor. The testing comes in at Cyber Essentials Plus, which includes external and internal vulnerability scans and hands-on testing of a sample of your systems.
Yes, but Plus audits need to happen within three months of your Cyber Essentials pass, otherwise you’ll have to redo the self-assessment first. Talk to us early and we’ll work back from your certificate date.
Home working setups and any personal devices used for work generally fall within scope, and it catches a lot of organisations out. We cover it at scoping so there are no surprises.
Browse our services to find out more information.
Browse our services to find out more information.
