This website uses cookies. View our cookie policy
Close
United Kingdom
Select regional store:

Cyber Essentials - Frequently Asked Questions

1. General information about the scheme:

  • Why should we get a Cyber Essentials certificate?
  • What is required for certification to Cyber Essentials?
  • What is required for certification to Cyber Essentials Plus?
  • Who will conduct the assessments for Cyber Essentials and Cyber Essentials Plus?
  • How long will it take between submitting our questionnaire and receiving our certificate?
  • Why choose a CREST-accredited certification body?

2. Application process

  • What can we expect from the Cyber Essentials application process?

3. Certification

  • Where can we display our Cyber Essentials certificate?
  • Where are Cyber Essentials certified organisations listed?
  • How do certified organisations get listed on the NCSC website?
  • How do we renew our Cyber Essentials certificate?

4. Guidance about the certification process

  • We need more guidance about the certification process.

5. Defining the scope

  • How do we define the scope?
  • What should a scope description look like?
  • How do we determine IP addresses?
  • What should we do if we have more than 16 IP addresses?
  • How do we determine how many workstations, mobile devices and build types need to be tested for Cyber Essentials Plus?
  • What should we do if we have more than ten device builds?

6. Vulnerability scanning

  • Why do some certification bodies require an external scan in addition to the SAQ?
  • IMust we have vulnerability scans/penetration tests provided by a third party?
  • Should we apply for a CE badge in addition to our ISO 27001 certification?
  • Can we use our existing vulnerability scanning/penetration testing company?
  • Can we self-certify and carry out our own vulnerability scans and penetration tests?
  • What is the difference between the types of scans and assessments that will be conducted by the certification body for Cyber Essentials and Cyber Essentials Plus?

7. Cyber Essentials and ISO 27001 certification

  • Do organisations have to certify to Cyber Essentials if they have already achieved ISO 27001 certification?
  • Should we apply for a Cyber Essentials badge in addition to our ISO 27001 certification?
  • Can Cyber Essentials replace ISO 27001?
  • Which should we start first: Cyber Essentials, ISO 27001, or both at the same time?

Require more assistance? 

Purchase a short Live Online consultancy session with one of our experts. It is ideal for organisations that are unsure about the scheme’s requirements, which option to choose, or how to define the scope of the certification. 

Alternatively, please contact our team for further advice on our Cyber Essentials products and solutions.