The Problem

being unable to bid for government contracts or certain tenders because you don't hold Cyber Essentials certification, and not knowing where to start.

What I Do

a guided Cyber Essentials certification process: gap assessment, remediation against the five controls, questionnaire completion, and submission to an IASME-accredited certifying body so you get the badge and win more contracts.

What We Can Include

  • Readiness Assessment & Gap Analysis
  • Remediation Support (5 Controls)
  • Self-Assessment Questionnaire Support
  • IASME Certifying Body Submission
  • Firewall review across office and remote workers
  • Secure configuration baseline for every device
  • User account audit and admin-rights cleanup
  • Multi-factor authentication rollout
  • Patch and update policy written and applied
  • Antivirus and malware protection verified
  • Password policy aligned to the standard
  • Asset inventory of devices in scope
  • Mobile and BYOD device policy
  • Cloud services in scope (M365, Google, etc.) reviewed
  • Evidence pack ready for the assessor
  • Written policies and procedures at handover
  • Cyber Essentials Plus upgrade path mapped
  • Annual renewal reminder and support
  • Supply-chain and tender Q&A support
  • Cyber-insurance premium review after certification
  • Staff awareness briefing included

Common Questions

What is Cyber Essentials?

A UK government-backed certification that proves your business has five fundamental cyber security controls in place. Required for many government contracts and increasingly expected in supply chains.

Do I need Cyber Essentials as a small business?

If you handle government contracts, sensitive customer data, or bid for tenders: increasingly yes. Many supply chains now require it as a minimum standard.

What are the five Cyber Essentials controls?

Firewalls, secure configuration, user access control, malware protection, and patch management. I assess your current setup against all five and fix any gaps before submission.

How long does certification take?

It depends on how much remediation is needed against the five controls. An already-tidy setup is quick; businesses that need to harden a few things first take longer. I scope the remediation and fix any gaps before submission so you pass first time rather than rushing in and failing.

Is Cyber Essentials Plus different?

Cyber Essentials is self-assessed. Cyber Essentials Plus involves an external technical audit. I support both; the right level depends on your contract requirements.

What if I fail the self-assessment?

Most businesses need some remediation first. I identify the gaps in advance and fix them before you submit, so you pass first time.

How much is the certification fee?

The IASME certifying body charges around £300 for the basic certification. This is separate from my preparation fee and is paid directly to the certifying body.

How long is the certification valid?

12 months. It needs annual renewal. I support the renewal process each year so it doesn't lapse.

Will it help my cyber insurance premiums?

Some cyber insurers offer lower premiums for Cyber Essentials-certified businesses, worth checking with your broker after certification.

How Many Leads Is Your Website Losing You?

Most trades websites quietly leak leads every week: slow load, buried phone number, missing local pages. Answer 10 quick questions and I'll show you exactly where yours is bleeding, how many enquiries it could be costing you each month, and the three fixes that would make the biggest difference.

Ready to Get Started?

Wherever you are in Sussex, let's have a straight conversation about your situation, no jargon, no sales pitch.