Skip to Main Content
National Cyber Security Awareness Month | Save 15% on self-paced and staff awareness training courses | Use code NSCAM15
Cyber Essentials Plus Certification

Cyber Essentials Plus Certification

SKU: 5570
Format: Certification (Manual)
Availability: Available

Upgrade your IASME Cyber Essentials certificate to Cyber Essentials Plus (conditions apply*)

  • An IASME Cyber Essentials Plus certificate and report from one of the founding certification bodies that remain one of the largest in the UK today;
  • An on-site or remote assessment, internal vulnerability scans and an external vulnerability scan that offers a higher level of assurance to your stakeholders that your Cyber Essentials controls are in place.
  • A pre-test call can be arranged to help you get prepared for your assessment.

Cyber Essentials certificates are valid for 12 months, in line with IASME requirements. This package is an annual subscription product; however, you can cancel at any time. (T&Cs apply.)

Price: £1,450.00
ex. VAT

Cyber Essentials Plus Certification

This service will help you achieve Cyber Essentials Plus if you have already achieved Cyber Essentials certification within the previous three months. Before applying, you must confirm you hold a valid Cyber Essentials certificate.

This service is for organisations that have a high degree of knowledge of all five security controls and are comfortable carrying out all the preparations for certification.

This service is for organisations that have a high degree of knowledge of all five security controls and are comfortable carrying out all the preparations for certification.

What’s included?

  • Your Cyber Essentials Plus certificate and report.
  • An on-site/remote internal assessment and internal vulnerability scans.
  • External vulnerability scan.

How the application process works:

  • We confirm your Cyber Essentials certification meets the required criteria and schedule your on-site/remote assessment.
  • We conduct the internal assessment and scans on a sample of your Internet-facing devices, and then provide the results. If there are nonconformities, we will also provide feedback to help you understand how to achieve certification.
  • We schedule your external vulnerability scan.
  • Subject to a positive outcome, you receive your Cyber Essentials Plus certificate and report.
Net Promoter score of +68

Our Cyber Essentials services have an excellent NPS (Net Promoter Score) of +68

Is this service right for you?

This service is for:

  • Organisations that have recently (within the last three months) achieved Cyber Essentials certification and now want to achieve Cyber Essentials Plus certification.
  • Organisations that have a high degree of knowledge of all five security controls and are comfortable carrying out all the preparations for testing and certification.

If you haven’t recently achieved Cyber Essentials certification, you should purchase our Cyber Essentials and Cyber Essentials Plus Certification package.

If you need additional support with your Cyber Essentials Plus certification, you can purchase remote consultancy support by the hour. This service is delivered via email, telephone or Microsoft Teams by one of our cyber security experts.

See what our customers think about this service

“Brilliant service from the team who were completely supportive of someone like me who runs a microbusiness and is hopeless with technical stuff. I am so grateful fo the handholding and advice you gave me.”

- Caroline


“Thanks for all your support, team – really appreciate your assistance in getting us through this in such a short space of time. Couldn’t recommend a better group of folk to work with!”

- Rowan Troy, Six Degrees Technology Group Limited


“Amazing Service, very friendly throughout and willing to help you every step through the process.”

- Ian


“IT Governance were very helpful and really focussed on what was needed to get the certification and have a more secure setup as part of the process (we did not just get assurance, we improved our assurance process).”

- Karl Axnick, Alscient Ltd


“Terry and Dan were extremely helpful, knowledgeable, and provide quick and effective answers to any query I raised.”

- Anonymous


Benefits of Cyber Essentials Plus certification

Work with the best

IT Governance is one of the founding Cyber Essentials certification bodies and remain one of the largest in the UK today. We have issued over 5,500 certifications worldwide and our broad range of fixed-priced services has helped thousands of organisation achieve baseline cyber security.

Higher level of assurance

Cyber Essentials Plus offers a higher level of assurance. It involves a technical audit of the systems that are in scope for Cyber Essentials to verify that the Cyber Essentials controls are in place.

The internal and external scans will identify critical vulnerabilities that may lead to a compromise of your infrastructure.

Work with the UK government and MOD

Cyber Essentials Plus will give you the opportunity to work with the UK government and MOD.

Be listed on the National Cyber Security Centre’s database

Cyber Essentials Certificates issued in the previous 12 months will be displayed showing suppliers your commitment to protecting your own data and that of your customers.



Cyber Essentials Plus involves a technical audit of the systems that are in scope for Cyber Essentials. This includes a representative set of workstations, mobile devices and build types used by the organisation’s end users to complete their day-to-day duties. The number of builds is defined by the number of configurations of operating systems and software suites installed. If more than one browser or Office suite is used, each variant will need to be tested. If they are installed on the same build, this is acceptable.

  • This package includes on-site testing at one location, of one type of user account, on up to ten sample devices. Additional workstations, mobile devices and build types may need to be tested to meet the sampling requirements of the scheme. If you require more than ten end-user workstations to be tested, you will need to purchase Cyber Essentials Plus Certification – Additional Device Testing. This testing can be conducted remotely in some instances.
  • If you fail any of the Cyber Essentials Plus testing performed as part of the overall engagement, we will provide you with details of further tests required. Any retest should be completed within one month of the original assessment. These tests will be billed separately.
  • The package includes a vulnerability scan for up to 16 IP addresses. If you have more than 16 IP addresses, you will need to purchase additional IP packages in packs of 16. If you fail your external scan, a rescan will need to be purchased, plus any additional IP packages that you need to cover only the failing IP addresses if completed with 14 days of the first passing element.
  • If your business is located outside mainland UK, additional expenses will be charged to accommodate our consultant’s travel time and costs for the on-site assessment. These will be billed separately.
  • If your Cyber Essentials Plus application is unsuccessful, your Cyber Essentials certification may be revoked.

Pre-test requirements

  • All user devices are subject to testing and will be agreed upon before the testing date, including mobile and BYOD (bring your own device), and must be available for testing.
  • All devices within the scope of testing must be user devices and cannot be built specifically for testing.
  • A local user account with username and password must be available for each user group in scope.
  • Devices must have Internet access, allow emails from our test domain and be accessible by our test web server (
  • You must provide details of a user email account per user group being assessed.
  • Workstation builds must be configured to allow an authenticated vulnerability scan that will determine patch and version numbers of installed software, and you must provide details of the user account to be used.
  • Remote registry must be enabled on the workstation builds, and no global policies that block the authenticated vulnerability scan are permitted.

Customer Reviews

(4.75)stars out of 5
Number of reviews: 4
1. on 22/03/2021, said:
5 stars out of 5
The Team from IT Governance were fantastic to deal with and helped ensure our journey to achieving Cyber Essentials Plus at the first attempt was a painless journey. From our initial enquiries with Yvette to the eventual assessment by the team, we received timely responses to any queries we great advice along the way. We now have far more confidence in the process and will continue to use IT Governance for support in the years to come as we renew our certifications.
2. on 04/11/2020, said:
5 stars out of 5
Very friendly and knowledgeable team, made the process as straight forward as it can be, Thank you :)
3. on 22/09/2020, said:
5 stars out of 5
The team at IT governance are very knowledgeable and great to work with. We have done many assessments with the IT governance team and all been completed smoothly and within time, even with the current COVID situation. Great work guys!
4. on 22/09/2020, said:
4 stars out of 5
Some teething issues with respect to scope and recieving notifications but George (our auditor) was excellent and attended to all our needs to ensure the whole process went smoothly. He explained the process and when we needed to contact him he made every effort to detail what needed to be done. All in all a great credit to IT Governance!
Showing comments 1-4 of 4
This website uses cookies. View our cookie policy
WIN £100