Home  /  Cyber Essentials

Cyber Essentials certification

A UK government-backed scheme that protects your business against the most common cyber attacks — and proves to customers, partners and regulators that you take security seriously.

Overview

What is Cyber Essentials?

Cyber Essentials is a certification scheme backed by the National Cyber Security Centre (NCSC). It sets out a baseline of five technical controls that, when properly implemented, stop the vast majority of internet-based attacks.

For small and medium businesses it is the most practical first step in cyber security — affordable, well understood, and increasingly expected by customers and supply chains. Network Fish guides London businesses through both Cyber Essentials and Cyber Essentials Plus, from gap assessment to certificate.

The Standard

The five core controls

Get these right and you close the door on most common attacks. We assess, remediate and maintain each one across your devices and cloud services.

Firewalls

Secure your internet connection so only safe, necessary traffic reaches your network and devices.

Secure configuration

Set up devices and software to reduce vulnerabilities and provide only the services you actually need.

User access control

Ensure staff only have access to the data and services they need, with admin rights tightly managed.

Malware protection

Defend against viruses and other malicious software across every one of your devices.

Security update management

Keep devices and software patched and up to date with the latest supported versions.

Two levels

Cyber Essentials vs Cyber Essentials Plus

Choose the level of assurance that fits your business. We prepare you for either — and manage the whole process.

Self-assessment

Cyber Essentials

A verified self-assessment of your controls against the five-control standard. The fastest, most cost-effective route to certification and a strong security baseline.

Independently audited

Cyber Essentials Plus

Everything in Cyber Essentials, plus a hands-on technical audit by a certified assessor — the highest level of assurance, and often required for larger contracts.

The Business Case

Why get certified?

Win more business

Certification is now required for many UK government and supply-chain contracts.

Reassure customers

Show clients and partners that their data is protected by a recognised standard.

Reduce your risk

Close the door on phishing, malware and unauthorised access before they cost you.

Support insurance

Many cyber insurance policies look for Cyber Essentials as a baseline requirement.

Our Process

How Network Fish helps

  1. Gap assessment. We review your devices, cloud services and Microsoft 365 against the five controls and show you exactly where you stand.
  2. Remediation. We fix the gaps — firewalls, configuration, access, malware protection and patching — with minimal disruption.
  3. Certification. We guide you through the assessment (or the Plus audit) all the way to your certificate.
  4. Stay compliant. With ongoing managed IT support, we help you keep your certification year after year.

Ready to get Cyber Essentials certified?

Talk to a real engineer about where your business stands today — no jargon, no obligation.

Talk to us →