Cyber Essentials · we’re certified too
Cyber Essentials, without the headache
Cyber Essentials is the UK Government-backed scheme that proves your business has the basic protections that stop the most common attacks. It’s increasingly asked for by clients, insurers and public-sector buyers. We get your IT ready, fix what fails, and walk you through the assessment.
- Microsoft Partner
- Cyber Essentials certified
- 5.0 on Google
The five controls
What Cyber Essentials checks, in plain English
The scheme focuses on five technical controls. Together they block the large majority of everyday internet-based attacks.
-
01
Firewalls
Every device and internet connection sits behind a properly configured firewall, with default passwords changed and unnecessary services closed.
-
02
Secure configuration
Computers and cloud services are set up securely: unused software removed, auto-run disabled, strong authentication on.
-
03
Security update management
Operating systems and apps are supported and get high-risk and critical updates within 14 days of release.
-
04
User access control
People have only the access they need, admin accounts are separate and protected, and MFA is used on cloud services.
-
05
Malware protection
Every device is protected against malware, with protection kept current and suspicious files blocked.
-
06
Scope, and supported devices
Everything in scope must still receive security updates, which often means spotting that old laptop or router early.
Basic or Plus?
Cyber Essentials and Cyber Essentials Plus
Cyber Essentials is a verified self-assessment. You answer an online question set about your controls, and it’s reviewed by an assessor from a certification body.
Cyber Essentials Plus covers the same controls, but an assessor also tests a sample of your devices and accounts hands-on. It gives clients and buyers more assurance, and it’s required for some contracts. You need basic certification first, and Plus has to follow within a set window.
We prepare you for both. For Plus we run our own test beforehand, so the assessor’s visit isn’t the first time anyone has checked.
Your route to certification
Typical small business
- Gap review Week 1
- Fixes & evidence Weeks 1–3
- Questionnaire submitted Week 3
- Certified Week 4
Who needs it
Why Kent businesses get certified
-
Public-sector work
Required for many central government contracts that involve handling personal data or delivering certain ICT services.
-
Client requirements
Larger customers increasingly ask suppliers for it in their onboarding questionnaires.
-
Insurance
Insurers look favourably on it, and some policies ask about the same controls.
-
Trust
A recognised badge that shows customers you take their data seriously.
How we help
Our Cyber Essentials process
-
1
Scope & gap review
We agree what’s in scope and check every device, account and firewall against the requirements.
-
2
Fix the gaps
Updates, configuration changes, MFA, admin accounts and replacing unsupported kit, handled by us.
-
3
Complete the questionnaire
We help you answer accurately, with evidence ready for anything the assessor asks.
-
4
Stay compliant
Certification lasts a year. Our managed plans keep the controls in place for renewal.
FAQ
Cyber Essentials questions
Can’t see your question? Call 01843 482 279 or email hello@squareoneit.co.uk. You’ll get a straight answer from an engineer.
How long does Cyber Essentials take?
If your IT is already well managed, it can be a matter of days. If there are gaps, such as unsupported devices, missing MFA or overdue updates, allow a few weeks to fix them first. Our gap review tells you which camp you’re in.
How much does Cyber Essentials cost?
There are two parts: the certification body’s assessment fee, which depends on the size of your organisation, and the work needed to get your IT ready. We’ll quote our preparation work clearly after the gap review.
Is SquareOne IT Cyber Essentials certified?
Yes. We hold Cyber Essentials ourselves, so we’ve been through the same process we take you through.
What happens if we fail?
With proper preparation, failing is unusual. If an assessor raises an issue, you’ll usually have a short window to fix it, and we’ll handle the remediation.
Does it need renewing?
Yes, certification is valid for 12 months. Clients on our managed plans stay compliant through the year, which makes renewal straightforward.
Find out how close you are to passing
A free readiness check against all five controls, with a list of exactly what needs doing before you apply.
- All five controls checked
- Fixes costed
- No obligation
- Call the team01843 482 279
- Emailhello@squareoneit.co.uk
- VisitKent Innovation Centre, Thanet Reach Business Park, Broadstairs CT10 2QQ
- Helpdesk hoursMonday to Friday, 9am – 5pm