Cyber Essentials is a UK government-backed certification scheme covering five fundamental technical controls: firewalls, secure configuration, access control, malware protection, and patch management.
The base certification is a self-assessed questionnaire reviewed by an accredited certifying body; Cyber Essentials Plus adds independent technical verification, including vulnerability testing of in-scope systems. It is often required for UK government contracts and is widely used by small and mid-sized businesses as an accessible first step into formal cybersecurity practice.
Core technical controls
UK NCSC / IASME
Cyber Essentials Requirements for IT Infrastructure