Cyber Explained

What is Cyber Essentials — and does my business need it?

Cyber Essentials comes up constantly — for contracts, insurance and plain good sense. Here’s what it actually is, in plain English.

Get certifiedCall 0161 738 1399

Greater Manchester & UK-wide · free, no-obligation advice

Why Foresight

  • Cyber Essentials Plus certified
  • Supporting 130+ organisations since 2006
  • We reply within one working hour
  • Plain-English, no jargon

Quick answer

Cyber Essentials is a UK government-backed certification that shows your business has five basic security controls in place: firewalls, secure configuration, user access control, malware protection, and security update management (patching). Those basics stop the vast majority of common cyber attacks. It’s affordable, widely recognised, increasingly required to win contracts (especially public sector), and often a baseline for cyber insurance. There are two levels — Cyber Essentials (self-assessment) and Cyber Essentials Plus (independently tested).

The five controls

What it actually checks

ControlIn plain English
FirewallsYour network is protected from the internet
Secure configurationDevices and software are set up safely, not left on defaults
User access controlPeople only have the access they need; admin rights are controlled
Malware protectionEffective protection (like modern EDR) against malicious software
Security update managementEverything is kept patched and up to date

Why it matters

Three good reasons

Protection: these basics stop most common attacks. Contracts: many clients and nearly all public-sector work now require it. Insurance: it’s often the baseline insurers expect. In short, it pays for itself in protection and opportunity.

Which level, and how

Getting certified

There are two levels — see Cyber Essentials vs Cyber Essentials Plus. Note that from 2026 the scheme brings AI tools into scope. We handle the whole process and get you certified first time — see our Cyber Essentials service or check your readiness.

FAQs

Common questions

What is Cyber Essentials?
It’s a UK government-backed certification showing your business has five basic security controls in place — firewalls, secure configuration, user access control, malware protection and patching — which stop most common attacks.
What are the five Cyber Essentials controls?
Firewalls, secure configuration, user access control, malware protection, and security update management (patching).
Do I need Cyber Essentials?
If you want to win contracts (especially public sector), satisfy cyber insurers, or simply stop the most common attacks, then yes — it’s an affordable, recognised baseline most businesses should have.
How much does Cyber Essentials cost?
Certification starts from around GBP 320 + VAT, plus optional readiness support to help you pass first time. Cyber Essentials Plus costs more because it includes a hands-on technical audit.
How long does Cyber Essentials take?
With preparation, often a couple of weeks. We help you close any gaps first so you certify first time rather than failing and repeating it.

Ready to get Cyber Essentials?

We do the heavy lifting and get you certified first time. Check your readiness or get started today.

Get certifiedCall 0161 738 1399