Question 1

What is Cyber Essentials certification?

Accepted Answer

Cyber Essentials is a UK Government-backed cybersecurity certification scheme, supported by the National Cyber Security Centre (NCSC), that helps organisations protect themselves against approximately 80% of common cyber attacks. It covers five technical controls: firewalls, secure configuration, user access control, malware protection, and security update management. Certification is required for UK Government contracts involving the handling of sensitive data and is available at two levels: Cyber Essentials (self-assessment) and Cyber Essentials Plus (independent technical audit).

Question 2

How much does Cyber Essentials certification cost?

Accepted Answer

Cyber Essentials Level 1 (self-assessment) costs from £320 ex VAT for micro organisations (0–9 employees), £440 for small organisations (10–49 employees), £500 for medium organisations (50–249 employees), and £600 for large organisations (250+ employees). This includes online portal access, expert support, and IASME cyber liability insurance cover. Certification can be achieved in as little as 24 hours. Cyber Essentials Plus pricing is available on request as it depends on the scope and complexity of the organisation's IT environment.

Question 3

What is the difference between Cyber Essentials and Cyber Essentials Plus?

Accepted Answer

Cyber Essentials (Level 1) is an online self-assessment where the organisation completes a questionnaire about its security controls, verified by a Certification Body. Cyber Essentials Plus (Level 2) includes everything in Level 1 plus an independent technical audit conducted by a qualified assessor. The Plus assessment involves vulnerability scanning of devices, external port scanning of internet-facing IP addresses, and malware protection testing of email and browser configurations. Organisations must hold a valid Cyber Essentials certificate dated within three months before applying for Cyber Essentials Plus.

Question 4

How long does it take to get ISO 27001 certified?

Accepted Answer

ISO 27001 certification timelines vary depending on the organisation's size, complexity, and existing security posture. Armoryze's fast-track ISO 27001 service delivers positive results within 30 days by leveraging pre-built policy templates, gap analysis, and expert consultancy. For a typical small-to-medium business starting from scratch, the full certification process including implementing an Information Security Management System (ISMS), conducting a risk assessment, and completing the external audit takes between 3 to 6 months. Organisations with existing security frameworks in place can achieve certification more quickly.

Question 5

What is Trust AI Essentials certification?

Accepted Answer

Trust AI Essentials is the UK and Europe's first comprehensive, independent AI governance and compliance certification framework. It covers 16 key principles for trustworthy, ethical, and responsible AI practices, addressing transparency, accountability, fairness, security, and sustainability. The framework is aligned with the EU AI Act, OECD AI Principles, ISO/IEC 42001, and NIST AI RMF. It is designed for AI providers, AI deployers, and regulated industries including finance, healthcare, government, and education that need to demonstrate responsible AI governance and prepare for upcoming AI regulation.

Question 6

What is IASME Cyber Assurance and how does it compare to ISO 27001?

Accepted Answer

IASME Cyber Assurance (formerly IASME Governance) is a comprehensive UK cybersecurity standard that mirrors the key controls of ISO 27001 at a significantly lower cost. It includes GDPR requirements and builds upon the Cyber Essentials baseline. Pricing starts from £320 ex VAT for micro organisations, compared to thousands of pounds for ISO 27001 certification. IASME Cyber Assurance is ideal for small and medium businesses that want ISO 27001-level assurance without the higher cost and longer implementation timeline. A valid Cyber Essentials certificate is a prerequisite.

Question 7

Do I need a penetration test for Cyber Essentials Plus?

Accepted Answer

Cyber Essentials Plus does not require a full penetration test, but it does include a technical assessment that involves vulnerability scanning and external port scanning conducted by a qualified assessor. However, many organisations choose to combine Cyber Essentials Plus with a separate penetration test for a more thorough security evaluation. Armoryze offers CREST-standard penetration testing services covering web applications, APIs, mobile apps, cloud environments, and IT infrastructure, which can be bundled with your Cyber Essentials Plus certification for comprehensive security assurance.

Question 8

What cybersecurity certifications does Armoryze offer?

Accepted Answer

Armoryze is an IASME-registered Certification Body offering: Cyber Essentials Level 1 (self-assessment from £320), Cyber Essentials Plus Level 2 (independent technical audit), IASME Cyber Assurance Level 1 and Level 2, ISO 27001 fast-track certification, Trust AI Essentials (AI governance certification), and gap analysis services for GDPR, NIS 2, PCI DSS, ISO 22301, and ISO 27701. All assessments are conducted by CISSP, CREST, and CEH certified professionals with over 20 years of cybersecurity experience.

Cyber Essentials Plus Enquiry

Cyber Essentials Plus Enquiry. Please submit the below info.

Company

Certifications

Solutions

Services

Follow US