Cyber Essentials Plus

Overview

Cyber Essentials Plus is a UK Government-backed certification scheme administered by the National Cyber Security Centre (NCSC). It helps organizations demonstrate protection against the most common internet-based cyber threats. The Plus level requires hands-on technical testing by an independent assessor, including vulnerability scanning and simulated attack testing. CodeMiners' certification is required for UK Government contracts involving the handling of sensitive information.

Governing Body

UK National Cyber Security Centre (NCSC), administered by IASME Consortium

Scope of Certification

Covers five technical control areas: firewalls, secure configuration, user access control, malware protection, and security update management. Applicable to all internet-connected systems within the organization's scope.

Audit and Assessment Process

An IASME-accredited Certification Body conducts on-site or remote technical testing. The assessment includes internal and external vulnerability scanning, simulated phishing tests, and verification of patch management. Assessment is valid for 12 months.

Key Requirements

1. Boundary firewalls and internet gateways configured correctly
2. Secure default configuration of all devices and software
3. User access control with least-privilege enforcement
4. Malware protection on all endpoints
5. Security patches applied within 14 days of release

Compliance Entitlements

• UK Government-backed cyber security standard
• Hands-on technical verification by certified assessors
• Required for many UK Government contracts
• Verified protection against the five key cyber attack vectors

Client Benefits

• Demonstrates independently tested cyber resilience
• Required for UK Government supply chain participation
• Provides insurance-backed assurance against common cyber attacks

Related Certifications