Firewalls and internet gateways
Every device that connects to the internet must sit behind a correctly configured firewall. This stops unauthorised access to your network.
Cyber Essentials Self Assessment:
Self-Managed Certification Support
Get Cyber Essentials certified quickly with expert support from Intouch Tech
Fixed-price packages for every business size
Fast-track support available (subject to availability)
Direct access to UK-based cybersecurity specialists
Clear guidance designed to improve first-time pass rates
Certification valid for 12 months
£420
Vat not included
# of Employees
Important: You must select the correct package based on the total number of employees across your organisation, regardless of certification scope
Simple, professional, done properlyHow we support youWhat's includedWho this is best forWhat this package does not include
Simple, professional, done properly
The Cyber Essentials self-assessment is a verified online questionnaire that proves your organisation meets a baseline standard of cyber security.
Cyber Essentials is the UK’s most recognised entry-level cybersecurity certification. It demonstrates that your business has implemented the key technical controls needed to defend against the most common cyber threats. It is widely required by:
- Government supply chains
- Enterprise clients
- Procurement frameworks
- Cyber insurance providers
- Businesses working with sensitive customer data
How we support you
At Intouch Tech, we provide a structured Cyber Essentials certification support service that helps you complete the process correctly, reduce delays, and avoid common fail points.
This package is designed for organisations that are comfortable preparing their own environment, but want expert guidance to ensure their submission meets the required standard.
What's included
Application support. We set up your Cyber Essentials self assessment and give you access to the official assessment process.
Clear guidance on every question. We explain what each question is asking, so you can answer correctly the first time.
Pre-submission review. Before you submit, we check your answers for the risk areas that most often cause a fail.
Feedback and assessor communication. If the assessor needs changes, we explain what to fix and handle communication with them for you.
Your certificate. When you pass, you receive your certificate, valid for 12 months.
Who this is best for
This service is ideal if:
You want certification quickly and cost-effectively. This is our lowest-cost way to complete your Cyber Essentials self assessment.
You have IT support in place. You have in-house IT or an external IT provider who can make any technical changes.
Your systems are already well managed. Your devices are patched, protected and securely configured.
You are renewing. You want to renew Cyber Essentials with minimal hassle.
You want a structured process. You'd like expert checks that reduce the risk of failure.
What this package does not include
To keep pricing low, this package does not include:
- Cyber Essentials Plus testing
- One-to-one consultancy hours
- Remediation work or technical implementation
If you require hands-on support, we recommend our Assisted or Fully Managed packages.
Our security certifications
.avif)
Protect your business from common cyber threats
Cyber Essentials focuses on the core security controls that prevent the majority of everyday cyber attacks.
Win more contracts and pass supplier checks
Many buyers now require Cyber Essentials certification as a minimum standard for procurement and onboarding.
Demonstrate trust and cyber readiness
Certification gives customers confidence that your business takes cybersecurity seriously.
Meet public sector and government contract requirements
Cyber Essentials is often required for organisations working with government departments or in regulated industries.
Improve your security baseline
Cyber Essentials pushes better patching, access control, and secure configuration across your organisation.
The commercial advantage
Cyber Essentials isn't just about compliance. It helps you:
- Remove friction from procurement
- Speed up contract onboarding
- Reduce customer objections
- Strengthen your credibility as a supplier
Certification conditions and important informationTechnical readiness requirementsPricing and scope notes
Please review the following before purchase:
- Cyber Essentials certification is valid for 12 months from the date of issue.
- Once purchased, you have six months to complete the assessment process.
- If your submission is unsuccessful, you will receive feedback outlining the reasons.
- A resubmission window is provided (subject to the scheme rules).
- If a second attempt is unsuccessful, a new application will be required.
- Size of organisation must reflect the total number of employees across the full business.
- Any additional consultancy or remediation support is chargeable separately.
To successfully achieve Cyber Essentials certification, your organisation must be able to demonstrate:
- Supported operating systems and devices
- Firewall or equivalent boundary security
- Malware protection and endpoint security
- Patch management and update controls
- Secure configuration of systems
Cyber Essentials pricing varies based on company size. The price includes the cost of certification and assessment fees, along with Intouch Tech support services.
How the Cyber Essentials self assessment works
The Cyber Essentials self assessment is an online questionnaire about how your organisation protects its IT. You answer the official question set, and a qualified assessor checks your answers against the scheme requirements.
Here is our step by step guide to the process:
Agree your scope
We help you decide what is in scope, usually the whole organisation, including remote workers and cloud services.
Answer the question set
You complete the questions on the IASME assessment portal, with our guidance on anything unclear.
Assessor review
An independent assessor reviews your answers, normally within 3 working days.
Fix and resubmit if needed
If anything needs clarifying, you update your answers and resubmit.
Receive your certificate
On successful completion, your certificate is valid for 12 months.
Work at your own pace
You have up to 6 months from purchase to complete the assessment.
Free cyber insurance included
Eligible UK organisations that certify their whole organisation receive free cyber insurance as part of Cyber Essentials. It gives small and medium sized organisations extra protection and access to incident support if something goes wrong.
the difference
Cyber Essentials self assessment vs Cyber Essentials Plus
The self assessment is a verified self assessment: you answer the questions and an assessor checks your answers. Cyber Essentials Plus adds a hands-on technical audit, where an assessor tests your devices and systems directly.
Many organisations start with the self assessment, then move to Cyber Essentials Plus within 3 months to meet stricter contract requirements.
What you need to prepare
Most of the effort in a Cyber Essentials self assessment is knowing what you have. Before you start, gather:
01
Asset register
An asset register of laptops, desktops, servers, mobiles and network devices.
02
IT infrastructure document
A simple IT infrastructure document showing your internet connection, firewalls and cloud services.
03
Software and operating systems
A list of software and operating system versions in use.
04
How staff log in
Details of how staff log in, including remote workers and personal devices used for work.
We explain each of the Cyber Essentials requirements in plain English, so you know exactly what each question is asking.
The five technical controls
Every Cyber Essentials self assessment is built around five technical controls. Together they block the most common cyber attacks used by cyber criminals against UK businesses.
Secure configuration
Devices and software must be set up securely, with default passwords changed and unnecessary accounts and apps removed.
Security update management
Operating systems and software must be supported and patched. High-risk and critical updates must be installed within 14 days, and unsupported software must be removed.
User access control
Staff should only have the access they need. Admin accounts must be kept separate, and multi factor authentication is required for cloud services.
Malware protection
Every in-scope device needs anti-malware software or an equivalent control to stop malicious software running.
YOU MAY BE INTERESTED IN
Complete end-to-end certification management.
01
02
03
04
05
Guided support and expert-led preparation to reduce failure risk and get certified with confidence.
Full hands-on support from our team. We handle the hard parts so you can focus on running your business.
Independent technical testing of your devices and systems to certify at the higher Cyber Essentials Plus level.
Expert support for the technical testing stage. We help you prepare, fix issues, and pass first time.
Fully managed Cyber Essentials Plus. We coordinate the audit, remediation, and submission end to end.
FAQ
Cyber Essentials SELF-MANAGED questions
What is Cyber Essentials certification?
Cyber Essentials is a government-backed certificate showing your business has the core technical controls in place to fend off common cyber attacks.
How long does Cyber Essentials take?
Most businesses certify in 5 to 10 working days, depending on readiness and how quickly you reply.
Do I need IT support to complete Cyber Essentials?
Not always, but most businesses find it easier with their in-house IT or an IT provider on hand to meet the technical requirements.
Is Cyber Essentials required for government contracts?
Plenty of government and public sector contracts set it as a minimum requirement to bid.
Can I upgrade to Cyber Essentials Plus?
Yes. Cyber Essentials Plus adds independent technical testing and is worth it for higher-risk environments.
How many questions are in the Cyber Essentials self assessment?
The question set covers your organisation details, what is in scope and each of the five technical controls. Most questions are yes or no, with short written answers where you need to describe your setup. You can preview the full question set before you start, and we help you with any question you are unsure about.
What happens if I fail the Cyber Essentials self assessment?
If the assessor finds an answer that does not meet the requirements, you can fix the issue and resubmit. Resubmissions are reviewed within 3 working days, and you have up to 6 months from purchase to complete your assessment. Our guidance is designed to help you pass first time.
How much does a Cyber Essentials self assessment cost?
Our self-managed Cyber Essentials self assessment starts from £420 + VAT. The price depends on the total number of employees across the business. Our Assisted and Fully Managed packages are available if you want more hands-on help.
GET CERTIFIED
Self-Manage Your Cyber Essentials
The DIY route to Cyber Essentials, with light-touch help when you need it. We point you to the controls that matter so you can self-certify with confidence.
0333 370 7000
Mon-Fri 8am-5pm · 24/7 for managed clients
[email protected]
Response within 1 business day, guaranteed
United Kingdom
UK-based team, since 2012
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.