Insurers price your controls. Fix the gaps before renewal, and eligible firms get £25,000 of cover included with certification.
Insurers ask what controls you have. Cyber Essentials covers the five basics, and the gap assessment shows what to fix first.
Book a 20-minute callWhat this usually looks like
Renewal asks what controls you have
At renewal, an insurer asks about your controls: multi-factor sign-in, patching, backups, who has admin rights. The answers are worth having to hand before the form arrives.
NCSC and IASME say certified organisations are 92% less likely to make a cyber insurance claim. That is a correlation reported by the provider of the included insurance. It is not a promise about your firm.
The £25,000 cover
Eligible organisations get cyber insurance with a total liability limit of £25,000 included with Cyber Essentials certification, arranged by IASME. Eligible means UK-based, turnover under £20m, the whole organisation certified, and opted in during the application.
It comes with certification. It does not come from Cyberhead, and we do not arrange it. IASME also describes a 24-hour incident response helpline that comes with the insurance. The cover is described for Cyber Essentials certification. If you choose Cyber Essentials Plus, ask IASME what applies.
The offer
A half-day gap assessment for Cyber Essentials or Cyber Essentials Plus
- Up to 50 staff£695
- 51 to 250 staff£995
- Above 250 staff, or several sitesQuoted
Prices exclude VAT. On site in Oxfordshire, Berkshire, Buckinghamshire, Wiltshire and Gloucestershire, or online anywhere in the UK. The certificate itself is issued, and charged for, by a licensed Certification Body.
What you get
Your report within 5 working days:
A one-page board summary
Where you stand against the five Cyber Essentials controls, in plain English.
What attackers can see of you online
An external exposure report, from public sources only.
A fix list, in order
Clear actions for your IT team or IT firm, most important first.
Who leads the work
Sean Muirhead, founder, oversees every gap assessment. CISSP, CISM, CISA. Former Group IT Security Officer for a FTSE 250 insurer. 25 years in cyber security. More about Sean
How it works
- A 20-minute call to check scope and fit.
- A half-day visit or video session.
- Your report within 5 working days.
- Your IT team or IT firm makes the fixes.
- A re-check, if you want one.
- You certify with a licensed Certification Body.
Questions
- Does this replace our cyber insurance?
- No. The included cover is for eligible firms and comes with certification. Whether it suits you alongside your own policy is a question for your broker.
- Do you certify us?
- A licensed Certification Body issues the certificate. We get you ready to pass it first time.
- We already have an IT firm. Do we still need this?
- Often, yes. We work alongside your IT firm and give you an independent view.