Shift Key Cyber Logo
Book a Free Consultation
Cyber Essentials/ Plus2026-08-13T14:23:26+01:00

Cyber Essentials/ Plus

Ensure the right controls are in place with our tailored Readiness and Certification service. Our Cyber Essentials advisor will check and prepare your organisation for certification, or we'll certify you if you are compliant-ready.  

Cyber Essentials is a UK Government-backed scheme to protect organisations of any size or sector against the most common cyber-attacks by ensuring 5 technical controls are in place and used effectively. These include secure configuration, user access control, malware protection, security update management and firewalls.

With cyber threats increasing in both volume and sophistication, our Cyber Essentials service will be tailored to your specific needs. A Cyber Essentials advisor will work with you to ensure you have the correct controls in place in readiness for certification – or we’ll certify your business if you are ready.

We offer 4 package options available for delivery depending on your requirements and budget:

Cyber Essentials: Certification Only

Suitable for organisations who require certification only and are ready to be certified.

This package includes:

  • 12 months Cyber Essentials certification.

  • Digital certification badge.

  • £25K cyber insurance.

  • One free re-attempt.

  • No advisor support.

From

£320 +VAT

Cyber Essentials: Guided

Suitable for those who want some guidance through certification from experienced, certified assessors.

This package includes:

  • All the benefits of our Certification Only package, plus:

  • Certification cost included.

  • Pre-assessment checks prior to submission.

  • Access to support via email and video call.

From

£700 +VAT

Cyber Essentials: Managed

The fully supported and guided service for those without in-house resources, or those looking for the most effective and streamlined route to certification.

This package includes:

  • All the benefits of our Guided package, plus:

  • 1-to-1 video calls with an NCSC-certified Cyber Advisor.

  • Step-by-step guidance and implementation advice to take you through the process.

From

£1,000 +VAT

Cyber Essentials Plus

The next step for businesses holding Cyber Essentials to provide further assurance of compliance with the 5 Cyber Essentials controls.

This package includes:

  • Cyber Essentials certification included.

  • Cyber Essentials Plus for 12 months.

  • £25K cyber insurance included.

  • Guidance throughout the process.

  • Remediation reports prior to assessment.

  • One free re-test.

From

£1,750 +VAT

Vulnerability Assessments

An additional ‘health check’ of your organisation’s cyber security, ensuring you stay proactive against threats, maintain compliance, and prevent breaches.

Available monthly or as a 1-to-1 assessment, this package includes:

  • Detailed reports with prioritised fix areas.

  • Expert guidance and support from an NCSC-approved advisor.

  • No Cyber Essentials certification required.

  • Ongoing Cyber Essentials and IASME Cyber Assurance compliance all-year.

  • Reduced end-of-year assessment work with frequent compliance checks and remediations.

Monthly From

£110 +VAT

Do I need Cyber Essentials?2026-02-02T12:27:34+01:00

Whilst it’s not essential for you to have Cyber Essentials unless you wish to apply for UK government contracts, we highly recommend you achieve certification for the basic protection of your organisation against cyber security threats.

What are the benefits of Cyber Essentials certification?2025-05-14T00:56:20+01:00

By having Cyber Essentials certification, you will be more protected against the most common security threats. It helps build trust with customers by demonstrating that cyber security is important in your organisation. All certified organisations are listed on the NCSC’s certification database. It also strengthens your supply chain. Finally, having Cyber Essentials will also allow you the opportunity to bid for UK Government and MOD tenders. You can read more about Cyber Essentials on our Cyber Essentials Certification Services page.

What is the difference between Cyber Essentials and Cyber Essentials Plus?2025-05-14T00:56:20+01:00

Cyber Essentials is a verified self-assessment certification that demonstrates an organisation has the required cyber security controls in place. Cyber Essentials Plus is based on the same technical requirements as Cyber Essentials, but it also includes a technical audit of your IT systems, to verify the controls are in place. This gives a higher level of assurance that an organisation has correctly implemented the controls. You can read more about the difference between Cyber Essentials and Cyber Essentials Plus on our Cyber Essentials Certification Services page.

What if we need some guidance with Cyber Essentials?2025-05-14T00:56:20+01:00

Shift Key Cyber are an Assured Service Provider for NCSC. The Cyber Advisors (Cyber Essentials) scheme is specifically aimed to help UK small and medium organisations by offering reliable and cost-effective cyber security advice, and where required, practical hands-on support to help guide businesses through the Cyber Essentials process and certification. You can find out more about our Cyber Advisor Service on our dedicated page.

How much does Cyber Essentials cost?2025-08-19T14:00:21+01:00

Cyber Essentials follows a tiered pricing structure depending on the size of your business. It is a verified self-assessment process which follows the pricing structure shown in the table below.

 

Business Size Cost

Micro organisations (0-9 Employees)

£320 + VAT

Small organisations (10-49 Employees)

 £440 + VAT

Medium Organisations (50-249 Employees)

 £500 + VAT
Large Organisations (250+ Employees) £600 + VAT
What is the difference between ISO 27001 and Cyber Essentials?2025-08-28T13:18:29+01:00

Both certifications establish controls needed to protect your business from cyber threats and are beneficial in their own rights, but also can co-exist together. Cyber Essentials provides you with five fundamental controls to protect against common threats, making it a reliable and cost-effective certification to demonstrate basic cyber compliance. ISO 27001 takes this a step further, offering a risk based and more comprehensive, in-depth set of optional controls that can be tailored to your organisation. You can find out more about the differences between ISO 27001 and Cyber Essentials in our dedicated blog.

Get in touch to find out more about our Cyber Essentials Certification Services, and discuss which certification path is best for your organisation.

If you are looking for support in achieving Cyber Essentials Certification, please visit our Cyber Advisor page.

Shift Key Cyber Logo Mark

Experts in audit, risk, governance and compliance

Services

spacer title

Company

Privacy Policy / Cookie Policy

© 2026 Shift Key Cyber LTD. Registered in England and Wales: 13676908.
Shift Key Cyber Logo is the Registered Trademark of Shift Key Cyber Limited.

Go to Top