Would you pass Cyber Essentials today?
Answer around 25 questions about how your business actually runs and find out where you stand against the five Cyber Essentials controls. You get your score and a breakdown by control straight away, with no email needed.
- About five minutes
- One question at a time, no sign-up to start.
- Up to 25 questions
- Covering all five Cyber Essentials controls. A couple drop out depending on your answers.
- Written for owners
- Plain English, with the technical detail underneath if you want it.
What we ask about
- 01
Firewalls
Keeping the internet out of the parts of your network it has no business reaching.
- 02
Secure configuration
Making sure devices and services are not left the way they came out of the box.
- 03
Security updates
Running software that is still supported, and patching it quickly when it matters.
- 04
User access control
Everyone has their own account, and admin rights go only to the people who need them.
- 05
Malware protection
Stopping malicious software from running on the devices your business depends on.
This is a self-declared readiness check, not a Cyber Essentials assessment. It gives you an honest view of where you stand. Certification itself is awarded by IASME through a certification body.
What this check is, and what it is not.
- What is Cyber Essentials?
- Cyber Essentials is a UK government backed certification covering five technical controls: firewalls, secure configuration, security update management, user access control and malware protection. It is run by IASME and awarded through certification bodies, and it is increasingly asked for in contracts, tenders and insurance renewals.
- How long does this readiness check take?
- About five minutes. There are 25 questions covering the five controls, plus three short questions about how your business is set up. You see your score and your results by control straight away without giving any details.
- Is this a formal Cyber Essentials assessment?
- No. This is a self-declared readiness check that shows you where you stand before you apply. The formal assessment is completed through the IASME portal and reviewed by a certification body.
- What fails a Cyber Essentials application automatically?
- Running operating systems or software the vendor no longer supports, and failing to install critical or high risk security updates within 14 days of release. Any of these ends an application on its own, whatever else is in place.