Practical support to define the assessment scope, fix technical gaps, prepare the questionnaire and approach the independent assessment with confidence.
39Security provides preparation and remediation support. Certification is awarded by an authorised Cyber Essentials Certification Body. Independent assessment fees are not included in our package prices.
Start with a focused review, choose hands-on preparation, prepare for Cyber Essentials Plus, or keep the controls under review for annual renewal.
A focused gap review against the current Cyber Essentials requirements.
£395 one-off · ex. VAT
Hands-on preparation, evidence support and remediation guidance through to assessment readiness.
£995 one-off · ex. VAT
Technical preparation for the independently verified Cyber Essentials Plus assessment.
£2,495 one-off · ex. VAT
Keep the five controls under review throughout the year and prepare early for annual renewal.
£295 one-off · ex. VAT
Prices are shown excluding VAT. UK VAT at 20% is added at checkout. The independent basic certification price is set by the scheme and varies by organisation size; Cyber Essentials Plus is separately scoped and quoted by the Certification Body.
The current Cyber Essentials Requirements for IT Infrastructure v3.3, effective for assessment accounts created from 27 April 2026, organise the assessment around five practical controls intended to reduce exposure to common internet-based attacks.
Control traffic between the internet, business networks and devices, including home and remote-working connections.
Remove unnecessary services and accounts, change insecure defaults and configure systems to reduce opportunities for attack.
Keep operating systems, applications, firmware and cloud services supported and apply vulnerability fixes within the required timescale.
Give people the access they need, protect administrator privileges and use strong authentication controls.
Use appropriate anti-malware, application controls and platform protections to prevent or contain malicious software.
The Cyber Essentials assessment fee is separate from 39Security consulting and remediation. IASME publishes tiered pricing based on employee count, starting from £320 plus VAT for a micro-organisation. Cyber Essentials Plus is priced by the Certification Body after scope review.
View the NCSC Cyber Essentials overview and current requirements ↗
No. 39Security provides readiness, remediation and evidence support. Certification is assessed and issued by an authorised Cyber Essentials Certification Body.
No. The independent Cyber Essentials or Cyber Essentials Plus assessment fee is separate and is shown clearly before work begins.
The five controls are firewalls, secure configuration, security update management, user access control and malware protection.
Cyber Essentials certification is renewed annually. The Renewal Care package helps keep scope, devices, software and evidence under review during the year.
Start with the readiness review or speak to 39Security about your users, devices, cloud services and certification deadline.
