How do I know what level I need?
This will be decided by the MOD and details provided for each contract offered.
What needs to be included in the scope?
The scope of the certification concerns the cyber resilience of the critical business operations of your organisation. All parts of your business that are essential for you to operate must be included within the scope.
How long does certification take?
There is no defined timescale for how long it may take. This depends on: The preparedness of the applicant. Whether the applicant needs to remediate any gaps before applying. The availability of the CB to carry out the assessment. [...]
How long does the certificate last?
The certification lasts three years, but an annual attestation will be needed to maintain the certificate, along with annual recertification to Cyber Essentials or Cyber Essentials Plus.