Home » Cyber Certification » Cyber Essentials Plus
Cyber Essentials Plus is the advanced level of the information assurance scheme owned by the UK National Cyber Security Centre (NCSC). It includes all the protections of Cyber Essentials with the added assurance of an independent, hands-on technical audit.
Cyber Essentials Plus begins where Cyber Essentials ends, with the same five technical controls but validated by a qualified third party. It includes a comprehensive on-site or remote audit, internal and vulnerability scans, and configuration checks to verify your systems are effectively secured.
The process provides a more rigorous and trusted certification, ensuring your cyber defences are properly implemented, ideal for businesses that handle sensitive data, deliver critical services, or want to inspire greater confidence in their supply chain.
We take the stress out of Cyber Essentials Plus. From initial readiness reviews to audit coordination and remediation support, we support it all. Our experienced consultants work with you to close security gaps, quickly and cost-effectively.
This advanced certification is not just a checkbox; it is evidence that your organisation has implemented cybersecurity best practices and that those controls have been independently verified.
Certification is based on real-world testing of your systems by cybersecurity professionals.
Proves your cybersecurity isn’t just theoretical, it has been tested and verified.
Ideal for demonstrating due diligence in highly regulated sectors or to win high-value contracts.
Identifies and helps mitigate misconfigurations, vulnerabilities, and operational weaknesses.
From preparation to certification, our team ensures you are fully supported every step of the way.
Get in touch today to find out more about the Cyber Essentials Plus Certification, and how the we can help your organisation.
Find the most frequently asked questions and find your answer
Cyber Essentials Plus includes a technical audit of your systems, whereas Cyber Essentials is a self-assessment.
Yes. You must have a valid Cyber Essentials certificate (within the last 90 days) before applying for Cyber Essentials Plus. You can apply for both certifications at the start of the process which, in our opinion, generally works better.
It includes end user and mobile device security assessments, internal and external vulnerability assessments, simulated attacks, and configuration reviews.
Most organisations complete the process within 5–10 business days depending on readiness.
Yes. We provide full pre-audit support to help identify and address potential issues beforehand.
It’s required for some MOD and government contracts and strongly recommended for high-risk environments.
12 months from the date of certification.
You will receive a remediation plan and a short window to fix identified issues before reassessment.
Yes. Most audits can be completed remotely with appropriate technical access and controls.
Cyber Essentials Plus is more expensive due to the technical testing involved but offers much stronger assurance. Contact us for more information.
Musketeer Solutions
Business Director Peterborough, Management Consultancy East Anglia
We are incredibly pleased with the outstanding service provided by Rob Lancaster of StarSwift in supporting us through the Cyber Essentials certification process and delivering ongoing IT security services. Rob has worked with us for several years and established an excellent understanding of our business and requirements.
Hallinans
Namita, Managing Director
We were fortunate to be invited to work with Rob and he made the process seamless, straightforward and without the jargon and complication that often comes which computers and technology. Rob’s knowledge is first rate as is his swift communication and competitive pricing. Options were always provided to us along with reasoning and recommendation. Cannot recommend Rob and StarSwift highly enough.
Lone Star Analysis
Kat Simmonds, CoS
Well organised, Rob is very clear in his explanations and communicates well throughout the assessment.
Growth Studio Group
Andy Bennett, Director
Rob was extremely helpful and responsive to questions we had with our Cyber Essentials Certification. It made the whole process seamless.