Cyber Essentials is now a ticket to bid. Get it first time, before the deadline.

If a tender asks for Cyber Essentials, start with a check, so the application goes in right first time.

Book a 20-minute call

If a tender asks for Cyber Essentials

If a contract or tender asks for Cyber Essentials, you need the certificate in hand, not in progress. A failed first attempt costs time you may not have.

The gap assessment tells you what would fail, and in what order to fix it, so your IT team or IT firm can get on with it. Then you apply to a licensed Certification Body.

From late April 2026, not turning on multi-factor authentication for cloud services where it is available is an automatic fail.

A half-day gap assessment for Cyber Essentials or Cyber Essentials Plus

  • Up to 50 staff£695
  • 51 to 250 staff£995
  • Above 250 staff, or several sitesQuoted

Prices exclude VAT. On site in Oxfordshire, Berkshire, Buckinghamshire, Wiltshire and Gloucestershire, or online anywhere in the UK. The certificate itself is issued, and charged for, by a licensed Certification Body.

Your report within 5 working days:

A one-page board summary

Where you stand against the five Cyber Essentials controls, in plain English.

What attackers can see of you online

An external exposure report, from public sources only.

A fix list, in order

Clear actions for your IT team or IT firm, most important first.

Sean Muirhead

Sean Muirhead, founder, oversees every gap assessment. CISSP, CISM, CISA. Former Group IT Security Officer for a FTSE 250 insurer. 25 years in cyber security. More about Sean

  1. A 20-minute call to check scope and fit.
  2. A half-day visit or video session.
  3. Your report within 5 working days.
  4. Your IT team or IT firm makes the fixes.
  5. A re-check, if you want one.
  6. You certify with a licensed Certification Body.
How early should we start?
As soon as you see the requirement. The check takes half a day and the report comes within 5 working days. The fixes and the application come after that.
Do you certify us?
A licensed Certification Body issues the certificate. We get you ready to pass it first time.
We already have an IT firm. Do we still need this?
Often, yes. We work alongside your IT firm and give you an independent view.

Book a 20-minute call

Back to The CISO Centre