Cyber Essentials Consultancy and Certification Support

Getting the scope right first

Most Cyber Essentials difficulties come from scope: forgotten devices, unmanaged personal equipment, cloud services nobody listed, or an assumption that home working sits outside the assessment. We establish the boundary before any remediation starts.

• Devices in use, including laptops, mobiles and any personal equipment
• User accounts, administrative accounts and how they are granted
• Cloud services and the way they are accessed and secured
• Firewalls, routers and the network boundary, including home workers
• Whether a whole-organisation scope is realistic or a defined subset is better

Gap assessment and remediation

We compare the environment against the technical control themes, then fix what is missing rather than simply reporting it. Where a control needs a process rather than a setting, we write the process with you.

• Firewalls and boundary configuration
• Secure configuration of devices and services, including default credentials
• User access control, administrative accounts and multi-factor authentication
• Malware protection across the device estate
• Security update management and unsupported software
• Supporting policies and the day-to-day processes behind them

Submission, renewal and what happens afterwards

We prepare the answers with you so the submission is accurate and defensible, and support you through any clarification the assessor raises.

Certification lapses quickly in a changing estate, so we agree how the controls will be maintained and handle the annual renewal as a planned piece of work rather than a scramble.

• Drafting and reviewing the self-assessment responses
• Collating the supporting evidence you need to hand
• Liaison with the certification body during the assessment
• Handling any queries or resubmission requirements
• Annual renewal planning and ongoing control maintenance