Cyber Essentials
Cyber Essentials Plus UK Readiness Checklist
A Cyber Essentials / Plus checklist for boundary firewalls, secure config, access control, malware, and patching.
- Estimated time
- 4–12 Weeks
- Audience
- UK SMEs and Suppliers to UK Government
- Last updated
Operational reference for Cyber Essentials preparation. Certification is issued by IASME-accredited certification bodies.
Progress is saved in this browser only. Nothing is sent to a server.
Phase 1: Scope
Phase 2: Five Controls
Phase 3: Plus Testing
Phase 4: Maintain
FAQ
CE vs CE Plus?+–
Plus adds a hands-on technical verification. Many UK public-sector contracts require Plus.
Who certifies?+–
IASME-accredited certification bodies.
Is it equivalent to ISO 27001?+–
No. It is a baseline hygiene scheme, much narrower than an ISMS.
Does it include phishing training?+–
The five technical controls are the scheme. Training is good practice but not the whole CE standard.
Related field notes
The checklists and field notes provided on this website are for educational and informational purposes only. They do not constitute legal, financial, or professional advice. Completing a checklist does not guarantee compliance, certification, or immunity from audits. Always consult with a certified auditor or legal counsel for your specific organizational needs. Full disclaimer