Home » Cyber Certification » Cyber Essentials Plus
Cyber Essentials Plus is the advanced level of the information assurance scheme owned by the UK National Cyber Security Centre (NCSC). It includes all the protections of Cyber Essentials with the added assurance of an independent, hands-on technical audit.
Cyber Essentials Plus begins where Cyber Essentials ends, with the same five technical controls but validated by a qualified third party. It includes a comprehensive on-site or remote audit, internal and vulnerability scans, and configuration checks to verify your systems are effectively secured.
The process provides a more rigorous and trusted certification, ensuring your cyber defences are properly implemented, ideal for businesses that handle sensitive data, deliver critical services, or want to inspire greater confidence in their supply chain.
We take the stress out of Cyber Essentials Plus. From initial readiness reviews to audit coordination and remediation support, we support it all. Our experienced consultants work with you to close security gaps, quickly and cost-effectively.
This advanced certification is not just a checkbox; it is evidence that your organisation has implemented cybersecurity best practices and that those controls have been independently verified.
Certification is based on real-world testing of your systems by cybersecurity professionals.
Proves your cybersecurity isn’t just theoretical, it has been tested and verified.
Ideal for demonstrating due diligence in highly regulated sectors or to win high-value contracts.
Identifies and helps mitigate misconfigurations, vulnerabilities, and operational weaknesses.
From preparation to certification, our team ensures you are fully supported every step of the way.
Get in touch today to find out more about the Cyber Essentials Plus Certification, and how the we can help your organisation.
Find the most frequently asked questions and find your answer
Cyber Essentials Plus includes a technical audit of your systems, whereas Cyber Essentials is a self-assessment.
Yes. You must have a valid Cyber Essentials certificate (within the last 90 days) before applying for Cyber Essentials Plus. You can apply for both certifications at the start of the process which, in our opinion, generally works better.
It includes end user and mobile device security assessments, internal and external vulnerability assessments, simulated attacks, and configuration reviews.
Most organisations complete the process within 5–10 business days depending on readiness.
Yes. We provide full pre-audit support to help identify and address potential issues beforehand.
It’s required for some MOD and government contracts and strongly recommended for high-risk environments.
12 months from the date of certification.
You will receive a remediation plan and a short window to fix identified issues before reassessment.
Yes. Most audits can be completed remotely with appropriate technical access and controls.
Cyber Essentials Plus is more expensive due to the technical testing involved but offers much stronger assurance. Contact us for more information.
Zoho UK
Santhana Gopalan, SIRO
It was great working with Rob on the audit! We really appreciated your guidance, clear direction, and helpful feedback throughout the process.
Musketeer Solutions
Business Director Peterborough, Management Consultancy East Anglia
We are incredibly pleased with the outstanding service provided by Rob Lancaster of StarSwift in supporting us through the Cyber Essentials certification process and delivering ongoing IT security services. Rob has worked with us for several years and established an excellent understanding of our business and requirements.
Hallinans
Namita, Managing Director
We were fortunate to be invited to work with Rob and he made the process seamless, straightforward and without the jargon and complication that often comes which computers and technology. Rob’s knowledge is first rate as is his swift communication and competitive pricing. Options were always provided to us along with reasoning and recommendation. Cannot recommend Rob and StarSwift highly enough.
Lone Star Analysis
Kat Simmonds, CoS
Well organised, Rob is very clear in his explanations and communicates well throughout the assessment.
Growth Studio Group
Andy Bennett, Director
Rob was extremely helpful and responsive to questions we had with our Cyber Essentials Certification. It made the whole process seamless.
Cambridge Business Management Consultancy
Rob at StarSwift always provides competent and professional explanations and supporting information for all our cyber security needs. He fully understands the requirements of small businesses, and tailors his advice accordingly. His guidance and support through the Cyber Essentials process has made our business better prepared and expanded our knowledge base around cyber security. Quick response times, competence, and a focus on what we as a customer really need are highly appreciated.
Global Development, Digital transformation & IT Services Company
We had an excellent experience working with Rob during our Cyber Essentials certification process. His deep knowledge of the standard, combined with a practical and methodical approach, made the entire engagement smooth and efficient. Rob took the time to clearly explain the rationale behind each requirement when necessary, helping our team not only meet the standard but also better understand its long-term value for our organization. His responsiveness and clarity in communication stood out, and he remained supportive throughout, even when we had questions outside the immediate scope. Overall, Rob played a key role in making this a successful and stress-free certification, and we would be happy to work with him again in the future.