Three steps to certification
Select a Certification Body through one of our Accreditation Bodies.
Verify that your IT is suitably secure and meets the standards set by Cyber Essentials - your Certification Body can help with this.
Complete the questionnaire - your Certification Body will provide this and verify your answers. Once you’ve passed, you will be award your Cyber Essentials certificate.
The process in more detail
Selecting a Certification body
Your first port of call is our Directory of Accreditation Bodies. Read the details about each of these and choose one which feels like a good fit for your organisation.
Once you have selected an Accreditation Body, click through to their websites and their directory of Certification Bodies. It is the Certification Bodies which will perform your evaluation and award your Cyber Essentials Certificate.
Verify your IT is suitably secure
Cyber Essentials has a detailed set of requirements for your Information Technology. You will need to make sure your systems and software meet these before you move on to the next stage of certification.
You may be required to supply various forms of evidence before your chosen Certification Body can award certification at the level you seek.
Complete the self-assessment questionnaire
Having understood the requirements which Cyber Essentials puts on the installation, configuration and maintenance of your IT, you are ready to complete the Certification questionnaire and submit this to your Certification Body. The actual questionnaire which you complete will be supplied by your Certification Body.
What is an Accreditation Body?
Our five Accreditation Bodies have been specially selected by the NCSC to oversee Cyber Essentials. They recruit and manage our numerous Certification Bodies, ensuring the standards which we have set down for the scheme are met.
Each Accreditation Body:
- Produces a questionnaire for their Certification Bodies to use when certifying
- Has a process for auditing its Certification Bodies in place
- Verifies that all of their Certification Bodies meet the NCSC’s demanding level of technical competence
- Is audited at least every 12 months by the NCSC