Cyber Essentials FAQ’s

Cyber Essentials FAQ's

How does Cyber Essentials process work?

Once the fee payment has been processed, you will receive an email explaining how to access the members’ area. You then create an account to access the online questionnaire and save your progress. Once the questionnaire is complete, you submit your application electronically and you will receive a confirmation. At that stage, you will be contacted by a member of our team to review your application.

What if some of the questions are unclear?

Throughout your self-assessment, you have the possibility to ask for help via the contact us form.

What if I have a doubt about an answer?

When you are completing the questionnaire, you can save your progress and validate a section.

If we need to verify any answers you have submitted, we can arrange a quick discussion with you to determine if your answer represents your environment against the Cyber Essentials control.

Is there a vulnerability scan required as part of the Cyber Essentials basic level?

The basic level assessment of Cyber Essentials only requires a self-assessment. No additional vulnerability scan, test or third party verification is needed as per the Government Scheme guidelines.

What are the criteria to obtain the accreditation ?

You need to be compliant on all the questions to pass the Cyber Essentials assessment. You do need to be controlling all these aspects of your system to be certified. If you are not compliant in some of the questions, we suggest you try and change your processes to meet the requirement and certainly add notes to explain how you control that risk.

How do I get notified about my application status?

We will keep you up to date with your application status through e-mail. You will either receive your accreditation to confirm your compliance or get feedback on any aspect of the assessment which is not fully compliant. You will receive detailed comments from the assessor on all answers that were considered non-compliant.

What happens if I don't obtain the Cyber Essentials accreditation?

In case of non compliance to Cyber Essentials, we allow you five working days to examine the feedback from the assessor and fix any issues with your network and policies. You can then update your answers and the assessor will have another look without any extra charges. However, if you are still not compliant after these five days you will have to reapply and pay the assessment fee again.

How long do I have to complete and submit my Cyber Essentials self-assessment?

You have 3 months from the date of application to complete and submit your assessment. After this time your account will be closed.  You would have to reapply and pay the application fee to re enter the process.

What if my IT infrastructure is handled by a third party provider?

You should check with your provider if they are already Cyber Essentials accredited. If this is not the case, you should direct them towards a certification body. You can always contact us with your provider details and our expert team will contact them to discuss the next steps.

How long is my Cyber Essentials accreditation valid?

The Cyber Essentials accreditation is valid for 1 year. Given the very fast pace of cyber threats with new vulnerabilities continually being identified, it is recommended that organisations maintain the principles of the Scheme on an ongoing basis by undertaking a self-assessment a minimum of once a year.

How can I upgrade my Cyber Essentials accreditation to Cyber Essentials Plus?

Cyber Essentials Plus is the next level of assurance through the external testing of the organisation’s cyber security approach. Once you have completed the Cyber Essentials self-assessment and received the accreditation, you should fill in the contact form on the Cyber Essentials Plus page. Our expert team will then contact you to discuss your requirements for this customised process.

How do i reload a saved assessment?

When you save the progress of a assessment and come back to it at a later date you will see that your assessment is empty.

At the top of the assessment you will see Continue a saved form and the dates you saved the forms click on the date and this will load your saved form for you.