Cyber Essentials · Cyber Essentials Plus
Get Cyber Essentials certified, with an NCSC Assured Service Provider
Cyber Essentials is the UK government-backed certificate that shows your organisation has five basic security controls in place. We check where you are, fix the gaps and guide you through the IASME assessment, then help you stay certified every year. If you’re already close, you can be certified within days.
NCSC Assured Cyber Advisor
IASME fee from £320 + VAT
Fixed quote after a free call
Yann Davies
Managing Director
·
Updated 11 October 2026
Free consultation call
Talk to an NCSC-assured Cyber Advisor
ABCOM is an NCSC Assured Service Provider under the Cyber Advisor (Cyber Essentials) scheme. On a free 20-minute consultation call we look at your devices, cloud services and network, tell you honestly how close you are to Cyber Essentials, and give you a fixed quote.
A gap analysis against all five controls, with remediation advice so you pass first time
A fixed quote for the IASME fee and any help you need
Cyber Advisors independently assessed by IASME for the NCSC
IASME Cyber Assurance Level 2, independently audited
A Burgess Hill team since 1996, with on-site visits when needed
Whether you qualify for the included cyber insurance
Or call 01444 871 200. We reply to enquiries within one working day, Monday to Friday, 8am–6pm.
Book your free consultation call
20 minutes · No obligation · Fixed quote afterwards
The five controls
What are the five Cyber Essentials controls?
Cyber Essentials checks five technical controls that stop the most common attacks, such as phishing and password guessing. Think of each one as a key: turn all five and you’re ready to certify.
Updated April 2026
Under the new Danzell question set, missing multi-factor authentication on cloud services, or high-risk updates not applied within 14 days, now means an automatic fail. The five controls themselves haven’t changed.
Why it matters
Most UK organisations aren’t protected yet
Cyber Essentials covers the basic controls that stop most common attacks, such as phishing and password guessing. Few businesses have all five in place.
of UK businesses had a breach or attack in the last 12 months
of businesses faced phishing, the most common attack
of businesses have controls in all five Cyber Essentials areas
of businesses hold Cyber Essentials certification
Win more work
Required for many UK government contracts, and more customers now ask suppliers for it.
Cyber insurance included
Eligible UK organisations under £20m turnover that certify their whole organisation get free cyber liability cover, up to £25,000, with the IASME certificate.
Show you take security seriously
A recognised certificate for customers, funders, trustees and insurers.
Source: Cyber Security Breaches Survey 2025/26, DSIT and Home Office.
★★★★★
Working within the healthcare sector, security, compliance and reliability are absolutely critical. ABCOM understood those requirements from day one. As cybersecurity and regulatory compliance became increasingly important, ABCOM helped us navigate those challenges with confidence.
Kay, Practice Manager, Family Dental, Crawley
A client of ABCOM for over 15 years
Choose your level
Cyber Essentials or Cyber Essentials Plus?
Both cover the same five controls. Plus adds an independent, hands-on check of your systems.
How it’s assessed
Verified self-assessment questionnaire
Same questionnaire plus a hands-on technical audit
Technical testing
No
Vulnerability scans and device checks by an assessor
Best for
Most small businesses and charities
Government contracts, larger supply chains and higher-risk sectors
months to complete Cyber Essentials Plus
The Plus audit must be completed within 3 months of your Cyber Essentials certificate being issued. If you’re aiming for Plus, we plan both together so you don’t miss the window.
Prices
How much does Cyber Essentials cost?
There are two parts: the IASME certification fee, which is fixed by organisation size and paid each year, and any help you need to get ready. All prices exclude VAT.
01
IASME certification fee
Set by IASME and paid annually. Includes the assessment of your self-assessment questionnaire.
Micro
1–9 employees
£320
Small
10–49 employees
£440
Medium
50–249 employees
£500
Large
250+ employees
£600
02
ABCOM readiness guidance
Only what you need. We confirm a fixed price after a free consultation call.
Light
You’re mostly ready. We review your setup and help you complete the questionnaire.
£295–£395
Standard
A few gaps to fix, such as MFA, unsupported devices or firewall settings.
£450–£695
Complex
Multiple sites, servers, remote access or significant remediation work.
£1,200–£2,500
Worked example: a 12-person office
Small-business IASME fee (£440) plus Standard readiness guidance (£450–£695).
+ VAT
Cyber Essentials Plus adds a hands-on audit and is quoted separately, based on the number of devices and sites in scope.
How it works
From first call to certificate
Most organisations that are already close can be certified within days. If there are gaps to fix, it typically takes a few weeks.
01
Free consultation call
We talk through your devices, cloud services and network, and tell you honestly how close you are.
02
Fix the gaps
We set up MFA, update or replace unsupported devices, tighten firewalls and admin access, and harden Microsoft 365.
03
Complete the assessment
We guide you through the IASME questionnaire so your answers are accurate and complete.
04
Certified, and kept current
You get your certificate for 12 months, and we remind you before renewal.
Optional
Continuous compliance, all year round
Cyber Essentials is checked on the day your certificate is issued, but you’re expected to stay compliant for the whole year. With our systems installed on your devices, we keep updates within 14 days, MFA switched on and devices supported throughout the year, and flag anything that drifts. Renewal then becomes a formality.
Free consultation call
Ready to unlock Cyber Essentials?
Book a free 20-minute call with an NCSC-assured Cyber Advisor. You’ll know exactly how close you are, what needs fixing and what it will cost.
1
A short call
We go through your devices, cloud services and network in plain English.
2
An honest readiness check
We tell you whether you’re Light, Standard or Complex, and what needs fixing.
3
A fixed quote
A written price for the IASME fee and any help you need, with no obligation.
NCSC Assured Cyber Advisor
IASME Cyber Assurance Level 2
Reply within one working day
Or call 01444 871 200, Monday to Friday, 8am–6pm.
Book your free consultation call
20 minutes · No obligation · Fixed quote afterwards
FAQs
Cyber Essentials questions, answered
Answers from ABCOM, an NCSC Assured Service Provider.
Is Cyber Essentials mandatory?
It is voluntary for most organisations, but it is required for many UK government contracts that involve handling personal or sensitive information, and more businesses now ask their suppliers for it. It is also a clear way to show customers, funders and insurers that you take security seriously.
What devices are in scope for Cyber Essentials?
Every device and service that can access your organisation’s data or connect to the internet on its behalf. That includes desktops, laptops, tablets and mobile phones, including personal devices used to access work email, files or apps, plus servers, network equipment and cloud services.
What changed in Cyber Essentials in April 2026?
The Danzell question set replaced the previous Willow question set for assessment accounts created after 26 April 2026. The five controls haven’t changed, but marking is stricter: missing multi-factor authentication on any cloud service where it’s available, or high-risk and critical updates not installed within 14 days, now means an automatic fail. Organisations also need to describe their scope in more detail and list the legal entities included, and the director’s declaration now confirms you’ll stay compliant for the whole certification year.
What happens if we fail Cyber Essentials?
If your assessment isn’t passed first time, you’re told what needs to change. The usual causes are unsupported operating systems, missing security updates, weak or shared passwords, MFA not switched on for cloud services and admin accounts used for everyday work. We help you fix the issues and resubmit, and a free readiness check beforehand makes a fail much less likely.
Why choose ABCOM for Cyber Essentials?
We’re an NCSC Assured Service Provider under the Cyber Advisor (Cyber Essentials) scheme, we hold IASME Cyber Assurance Level 2, and we’ve supported businesses and charities from Burgess Hill since 1996. As your IT provider we can fix the gaps ourselves, rather than just telling you about them, and we can keep you compliant all year so renewal is straightforward.
Do you help businesses and charities in West Sussex with Cyber Essentials?
Yes. ABCOM is based in Burgess Hill and helps businesses and charities across West Sussex, Brighton and the wider South East to achieve Cyber Essentials, with remote support and on-site visits where needed.