Get Cyber Essentials Certified - Without the Headache
Cyber Essentials is the UK government-backed scheme that protects your business against the most common internet-based attacks. We guide you through every step, from gap assessment to certificate - and we hold it ourselves, so we know exactly what it takes.
Backed by the National Cyber Security Centre and delivered through IASME, Cyber Essentials is built around five technical controls proven to stop the overwhelming majority of common cyber attacks. It's increasingly required to win public-sector contracts, and it reassures your clients and insurers that you take security seriously.
- Protects against the most common internet-based threats
- Often mandatory for government and MOD-linked contracts
- Demonstrates security credibility to clients and insurers
- A foundation you can later build on towards ISO 27001
The Five Controls We Get You Through
Firewalls
We make sure every device that connects to the internet sits behind a correctly configured firewall, with default passwords changed and unnecessary access closed off.
Secure Configuration
Devices and software are set up to reduce the attack surface - removing unused accounts and software, disabling what you don't need, and locking down defaults.
Security Update Management
Operating systems and applications are kept patched and supported. From April 2025's v3.2 requirements, critical updates must be applied within 14 days - we keep you inside that window automatically.
User Access Control
People get only the access they need, admin rights are controlled, and multi-factor authentication is enabled on cloud services - now mandatory under the scheme where available.
Malware Protection
Appropriate anti-malware protection is in place and kept current across your devices, so known threats are stopped before they cause harm.
Cyber Essentials Plus
Ready for the next level? Cyber Essentials Plus adds a hands-on technical audit of your controls. We prepare you so the assessment is a formality, not a fire drill.
From Gap Assessment to Certificate
Certification starts at £320 + VAT for a small organisation, but the cost isn't the hard part - getting your environment to actually meet the requirements is. That's where we come in. We assess where you are, fix the gaps, complete the self-assessment with you, and get you certified the first time.
- Honest gap assessment against the current v3.2 requirements
- We remediate the technical gaps - not just hand you a checklist
- We complete the assessment questionnaire alongside you
- Annual renewal handled so your certification never lapses
Don't Just Take Our Word For It
Highway Business Services is Cyber Essentials certified. You can verify our live certificate on the official BlockMark registry.
Cyber Essentials FAQs
How long does certification take?
For a well-prepared small business, the self-assessment can be completed and submitted within a couple of weeks. The bigger variable is remediation - how much needs fixing first. Our gap assessment tells you upfront.
What's the difference between Cyber Essentials and Cyber Essentials Plus?
Cyber Essentials is a verified self-assessment. Cyber Essentials Plus adds a hands-on technical audit by an assessor to confirm the controls are genuinely in place. Plus carries more weight with some clients and contracts.
How much does it cost?
Certification fees start at £320 + VAT for a micro-organisation of 1-9 people and scale with size. Our support to get you ready is quoted separately based on how much work your environment needs.
Do we have to renew?
Yes - Cyber Essentials is renewed annually so it reflects your current setup. We handle the renewal cycle for you so it never quietly lapses.
Ready to Get Certified?
Let's start with an honest look at where you stand against the five controls.