Cyber Essentials for accountancy practices
Client bank details, tax records and payroll data make accountancy practices an attractive target. Cyber Essentials shows clients you take that responsibility seriously.
At a glance
- Help scoping cloud accounting platforms and client portals
- Suitable for sole practitioners through to multi-partner firms
- A recognised answer when clients ask about your security
Why accountancy practices certify
Clients expect it
Corporate and public sector clients increasingly ask their accountants to show recognised security controls before sharing sensitive financial information.
Professional confidentiality
Professional bodies expect members to protect client confidentiality. Cyber Essentials is a clear, independently assessed way to evidence sensible technical controls.
Busy-season pressure
Deadlines bring more remote working and more emailed documents, which is exactly when weak controls are most likely to be exploited.
Where accountancy practices commonly trip up
These are the issues we see most often when marking assessments, so you can deal with them before you submit.
- Only listing your practice software. Cloud accounting platforms, client portals, e-signature tools and file-sharing services all hold client data, so they’re in scope alongside Microsoft 365 or Google Workspace.
- MFA not enforced everywhere. Every cloud service that offers MFA must have it switched on for all users. Shared logins for software are a common stumbling block.
- Payroll and bureau systems. Where payroll runs on a separate platform, think through which accounts and devices you control. Those are in scope.
- Personal devices in busy periods. Home laptops used to catch up during peaks need to meet the same controls as office machines, or be kept out of work use.
Two ways to get certified
Our Supported Service gives you a plain-English gap analysis before submission, which is useful if you’re certifying for the first time or need a clean pass ahead of a client requirement. Practices with well-managed IT can go straight to Marking Only. Work closely with financial advisers? See our Financial Services page too.
For confident, well-prepared teams
Ideal if you have in-house expertise and have already checked your setup against the requirements.
- Your own secure assessment portal
- Independent marking with a feedback report
- Two working days to fix any non-compliances, then a complimentary re-mark
- Cyber Essentials report and certificate included
Cyber liability insurance is subject to IASME’s terms. Certifying more than one organisation? Define each additional organisation within your assessment and you’ll automatically be asked whether you’d like a duplicate certificate.
Buy Marking OnlyA senior assessor with you all the way
The right choice for most organisations, and for anyone working to a deadline.
- Your own assigned senior assessor
- Readiness check and gap analysis before anything is submitted
- Feedback within 24 working hours, with same-day assessments available subject to T&C’s
- Unlimited remote support for every question
- As many attempts as you need within the six-month assessment window
- Cyber Essentials report and certificate included
For our Supported Service: 100% of applicants who have followed our advice and who have submitted within the required deadlines have passed. Cyber liability insurance is subject to IASME’s terms. Certifying more than one organisation? Define each additional organisation within your assessment and you’ll automatically be asked whether you’d like a duplicate certificate.
Buy SupportedPrices are “from” prices, exclude VAT and depend on organisation size; your exact price is shown in our shop. Free cyber liability insurance is available to eligible organisations (IASME terms apply).
Guidance for accountants and bookkeepers
Practical articles from our assessors in the Resource Hub.
“Great support from Mark during the process who was very consultative and supportive with materials and resources during the process. I’d absolutely recommend working with Get Cyber Certified.”
Edward · Google reviewCommon questions
Is Cyber Essentials required by ICAEW or ACCA?
Not as a blanket requirement, but it is a widely recognised baseline. It’s also worth checking your professional indemnity insurer’s expectations, as many ask about cyber controls at renewal.
I’m a sole practitioner. Is this relevant to me?
Yes. Cyber Essentials scales to the size of your organisation, and your client-data obligations are the same whatever your headcount. Our Micro page explains more.
Can you help our clients get certified too?
Yes. Many practices refer clients to us. See our partner page or get in touch to discuss it.
More answers in our full FAQs.
Book a scoping call for your practice
Tell us about your systems and we’ll help you work out what’s in scope and which route suits you.