Choose the right route to certification
Not sure which you need? Try our package finder. From a quick independent mark to full governance assurance. All prices are “from” prices, exclude VAT and depend on organisation size; your exact price is shown when you buy.
£25,000 cyber insurance included with your certificate
If your whole organisation is certified, you're based in the UK or Crown Dependencies and your turnover is under £20m, you can opt in to £25,000 of cyber liability insurance during your assessment, at no extra cost. IASME terms apply.
Get Cyber Essentials certified
Not sure which to pick? The Supported Service is the safer choice for all but the most technically confident teams.
Marking Only
For teams with in-house expertise who have already checked their setup against the requirements.
- Your own secure assessment portal
- Independent marking with a feedback report
- Two working days to fix any non-compliances, then a complimentary re-mark
- Cyber Essentials report and certificate included
- Free cyber liability insurance for eligible organisations
Cyber liability insurance is subject to IASME’s terms. Certifying more than one organisation? Define each additional organisation within your assessment and you’ll automatically be asked whether you’d like a duplicate certificate.
Buy Marking OnlySupported
A senior assessor with you all the way. The right choice for most organisations and anyone with a deadline.
- Your own assigned senior assessor
- Readiness check and gap analysis before anything is submitted
- Feedback within 24 working hours, with same-day assessments available subject to T&C’s
- Unlimited remote support for every question
- As many attempts as you need within the six-month assessment window
- Report, certificate and free cyber liability insurance for eligible organisations
For our Supported Service: 100% of applicants who have followed our advice and who have submitted within the required deadlines have passed. Cyber liability insurance is subject to IASME’s terms. Certifying more than one organisation? Define each additional organisation within your assessment and you’ll automatically be asked whether you’d like a duplicate certificate.
Buy SupportedCE Readiness Assessment
An expert review of your answers before you submit for marking, giving you time to make any changes to your systems.
- We send you the question set to complete in line with your current setup
- Your answers are marked, with a gap analysis “to do” list and feedback on what’s needed to pass each non-compliant item
- Feedback is given outside the portal, so the usual two-day remediation limit doesn’t apply
- Certification isn’t included, so you can certify with us, IASME or another certification body
Independent audit and wider assurance
For organisations whose customers, contracts or boards need more than the Cyber Essentials verified self-assessment: an independent technical audit, or assurance across wider governance.
Cyber Essentials Plus certification
Cyber Essentials Plus uses the same technical requirements as Cyber Essentials, but adds a hands-on technical audit to verify that the controls are actually in place on your systems. When you pass, your organisation is certified to Cyber Essentials Plus, the highest level of the scheme.
What you receive
- Cyber Essentials Plus certification for your organisation
- Your Cyber Essentials Plus certificate and audit report
- Independent, verified evidence for customers, contracts and tenders that ask for CE+
- Certification valid for 12 months, renewed annually
What the audit tests
- A representative random sample of your user devices (typically around 10%), with further testing if needed
- All of your internet gateways
- All servers with services accessible to unauthenticated internet users
- Under the v3.3 Danzell requirements, if the first sample fails, a new random sample is selected and tested after remediation
How it works
- Achieve Cyber Essentials first. CE+ builds on a current Cyber Essentials certificate, and IASME requires the CE+ audit to be completed within three months of it. We can deliver your Cyber Essentials as part of the journey.
- Request your quote. Complete our short pre-quote questionnaire. Quotes are usually returned within 24 hours.
- Optional pre-CE+ assessment check. Before the formal audit starts, we can check your systems for non-compliant items while there’s still time to fix them. It reduces the risk of a failed first sample triggering a second sample. Ask about it when you request your quote.
- Your audit. A fully managed remote audit is carried out by one of our partner CE+ consultants, building on your current Cyber Essentials certification.
- Remediate across your whole estate. If the first sample fails, you have a single 30-day remediation window. Fixes must be applied to every in-scope device, not just those tested, because a new random sample is then selected, with no more than three working days’ notice, and tested. If the second sample shows the same missing updates, the CE+ assessment fails and IASME revokes the underlying Cyber Essentials certificate.
- Certified to Cyber Essentials Plus. You receive your CE+ certificate and report.
Because of the three-month window and the single 30-day remediation window, we recommend planning CE+ at the same time as your Cyber Essentials and making sure every device is fully patched before the audit starts. Our optional pre-CE+ assessment check helps you do exactly that.
Supported
Demonstrate effective information governance, with an assigned consultant to guide you.
- Covers IT security controls, incident response, staff training, planning and operations
- Your own guided assessment portal
- Documentation pack with standard process templates
- Assigned consultant and remote support throughout
- Pre-submission review and feedback
- Cyber Assurance report and certificate included
Cyber Essentials Plus or Cyber Assurance?
- Cyber Essentials Plus if a customer, contract or tender asks for independently tested technical controls.
- IASME Cyber Assurance if you need to evidence wider governance, such as incident response, staff training, planning and operations.
- Both build on Cyber Essentials, so certifying CE with us first gives you a head start on either.
Reviews from our clients
“Great support from Mark during the process who was very consultative and supportive with materials and resources during the process. I’d absolutely recommend working with Get Cyber Certified.”
Edward · Google review“Second year of using Get Cyber Certified for our Cyber Essentials accreditation, Mark again has been fantastic, great information and communication and fast turn around times!”
Alex · Google review“Our experience with Get Cyber Certified has been brilliant, for the second year running. From the onboarding meeting, right through to us achieving our certification, Mark has been really supportive, constructive and helpful.”
Bev · Google reviewNot sure where to start?
Book a free scoping call with an assessor. We’ll help you work out what’s in scope and which route suits you, with no obligation.