Cyber Essentials certification package
Secure your business with the essential cyber defences it needs and receive £25k in free cyber insurance coverage after certification.
Need Cyber Essentials for a tender, insurer or client requirement? We help you get ready without the jargon.
Most businesses don't come looking for Cyber Essentials because they woke up thinking about cyber security. It usually starts with a customer asking for it, a tender requirement, or an insurer raising it.
The good news is it's not as complicated as it first looks. The bad news is it's easy to get wrong if nobody's walked you through it properly.
We help you understand what's being asked, fix what needs fixing, and get you through the process in a way that actually improves your security - not just ticks a box.
No pressure. We’ll ask what has triggered the requirement, check where you are now, and explain what needs fixing before you submit.
What Cyber Essentials really gives you
- A recognised, government-backed way to show you take cyber security seriously
- A better chance of winning work where security is part of the requirement
- Confidence that the basics across your business are actually in place
- Protection against a large chunk of common cyber attacks
- A solid starting point for improving things further
What usually brings businesses here
A customer has asked for it
You're mid-conversation or mid-tender and suddenly Cyber Essentials is a requirement. Now it's urgent.
You want to win better work
More contracts are asking for proof of security. Without it, you don't even get a seat at the table.
Insurance or compliance pressure
Insurers and frameworks are tightening expectations. Cyber Essentials is often the baseline.
You're not 100% confident in your setup
Things have grown over time. You suspect there are gaps, but you're not sure where.
Most of the time, it's not that anything is badly broken. It's just that nobody's ever pulled it all together and checked it properly against a recognised standard.
What Cyber Essentials actually checks
At its core, Cyber Essentials is about five areas. Not hundreds. Not thousands. Just five areas that, if done properly, reduce a lot of common risk.
Firewalls
Making sure your internet connection and devices aren't left exposed to the outside world.
Secure configuration
Removing unsafe defaults, unused accounts and unnecessary software.
User access control
Making sure people only have access to what they actually need - nothing more.
Malware protection
Protecting devices against malicious software in a way that is actually managed and visible.
Security updates
Keeping systems patched so known weaknesses aren't left open.
The answers behind it all
The questions look simple - until they hit real-world setups. That's where most people get stuck. Our plain English guide to passing Cyber Essentials walks through each control area in detail.
Security updates: where many businesses get caught out
One of the Cyber Essentials control areas is security update management. In plain English, that means your devices and software need to be supported, updated and not left exposed to known vulnerabilities.
This sounds simple, but it is one of the areas where small businesses often struggle. Windows updates may be happening, but third-party applications, old software, failed updates and devices that have not checked in can still create problems.
Know what you have
You cannot confirm updates are being managed properly if you do not know which devices, software and versions are in use.
Remove unsupported software
Software that no longer receives security updates can create Cyber Essentials problems as well as unnecessary risk.
Keep evidence
It is much easier to answer Cyber Essentials questions when you can show what is installed, what is patched and what still needs attention.
“We think updates happen automatically” is not the same as knowing your software is supported, patched and being checked properly.
What we often see
"It should be fine…"
Antivirus is installed. Updates are happening. Accounts exist. But nobody has checked it properly in one place.
Microsoft 365 doing a lot of heavy lifting
Email, files and accounts all sit there - but access, MFA, roles and visibility haven't been reviewed in detail.
Updates left to chance
Some devices update. Some don't. Some are out of date and nobody realises.
Shared logins still in use
It works day to day, but it doesn't meet Cyber Essentials requirements. This catches out businesses that use contractors or outsourced support too — how contractor accounts are handled is one of the most common points of confusion.
No clear view of what's actually in place
Tools exist, but nobody has a simple, clear picture of coverage, gaps or risk. A good starting point is knowing which devices and cloud services are in scope for the assessment.
People under pressure
Cyber Essentials focuses on technical controls, but many attacks still start with a well-timed email. Staff are busy, moving quickly, and making decisions under pressure. That is where awareness and culture make a real difference.
Who this is for
A good fit if...
- You need Cyber Essentials for a tender, contract or supplier requirement
- You want help understanding the questions before submitting
- You know some security basics need tightening
- You use Microsoft 365 and want better account security
- You want practical help, not a pile of jargon
Probably not right if...
- You only want the cheapest possible certificate with no support
- You do not want to make any changes if gaps are found
- You need Cyber Essentials Plus testing immediately without preparation
- You are looking for enterprise consultancy rather than small business support
Still weighing up whether certification is the right move? Read our honest guide: Is Cyber Essentials worth it for small businesses?
Typical Cyber Essentials timeline
Every business is different, but this gives you a rough idea of how the process usually feels when we support it properly.
Quick discovery call
We find out what has triggered the need for Cyber Essentials, whether there is a deadline, and how your IT is currently managed.
Readiness check
We review the main control areas before you submit, so obvious issues are spotted early rather than becoming last-minute surprises.
Fix the gaps
This might mean tightening access, improving patching, sorting malware protection, reviewing firewall settings or cleaning up old accounts.
Complete the assessment
We help you understand the questions and submit answers that reflect what is actually in place.
Certification decision
Once submitted, the assessment is reviewed. If anything needs clarifying, we help you deal with it properly.
Keep the basics in place
Cyber Essentials lasts for 12 months, but the controls need looking after all year - especially updates, access and new devices.
The quickest certifications usually happen when the basics are already tidy. If there are gaps, that is not a failure - it is exactly why the process is useful.
What good looks like
You understand what the Cyber Essentials questions mean. The obvious gaps are fixed before you submit. Your devices, accounts, updates and protection are in better shape. And when a customer, insurer or supplier asks for evidence, you have a clearer answer.
The aim is not just to get the badge. It is to help you win trust, reduce risk and avoid being blocked from opportunities you are otherwise ready for.
Ready to get Cyber Essentials sorted?
If you need Cyber Essentials for a contract, insurance requirement or just peace of mind, we can help you get there without turning it into a headache.
Cyber Essentials support in Chesterfield, Sheffield and Derbyshire
Black Swan Cyber Security Solutions helps small businesses across Chesterfield, Sheffield, Derbyshire, South Yorkshire and the surrounding areas prepare for Cyber Essentials certification.
Whether you are a trades business in North East Derbyshire, a professional services firm in Chesterfield, a charity in Sheffield, or a growing small business that needs to meet supplier requirements, we can help you understand what needs fixing and guide you through the process.
Cyber security Chesterfield
Local cyber security support for small businesses in Chesterfield and nearby areas.
Cyber security Sheffield
Practical cyber security support for Sheffield businesses that need stronger protection.
Cyber security North East Derbyshire
Support for local businesses that need Cyber Essentials, better security and clearer guidance.
Cyber Essentials FAQs
What is Cyber Essentials?
Cyber Essentials is a UK government-backed certification scheme that helps organisations protect themselves against common online cyber threats.
Is Cyber Essentials worth it for a small business?
Yes, especially if customers, suppliers, insurers or tenders expect it. It also gives you a useful baseline for improving security across devices, accounts, software and access.
Do you only use CyberSmart?
No. CyberSmart may be suitable for some businesses, but we can use other certification routes or providers where appropriate. Our focus is helping you prepare, fix gaps and get through the process properly.
Can you help us pass Cyber Essentials?
We can help you prepare for certification by reviewing your setup, identifying gaps, helping implement the required controls and supporting you with the assessment questions. If you want to get a sense of the process first, our guide to passing Cyber Essentials covers it in plain English.
What are the five Cyber Essentials controls?
The five control areas are firewalls, secure configuration, user access control, malware protection and security update management.
What is the difference between Cyber Essentials and Cyber Essentials Plus?
Cyber Essentials is based on a verified self-assessment. Cyber Essentials Plus includes more rigorous independent technical testing of your systems.
Can Cyber Essentials help us win work?
Yes. Many organisations now ask suppliers to hold Cyber Essentials certification before bidding for work or joining a supply chain.
Cyber Essentials is often the start, not the finish
You do not need all of this to start Cyber Essentials. These are the areas many businesses look at once the basics are under control.
Managed antivirus
Strengthen malware protection with centrally managed next-generation antivirus.
Patch management
Understand what to patch, why automatic updates are not always enough, and how to prioritise vulnerabilities without getting overwhelmed.
Identity protection
Monitor Microsoft 365 identity threats, suspicious logins and risky account behaviour.
Email security
Reduce phishing, impersonation and malicious email risk before it reaches staff.
Microsoft 365 backup
Protect business email and files with separate cloud backup for Microsoft 365.
Security awareness training
Help staff spot phishing, scams and risky behaviour without blame or boring training.
Meet Kevin: Founder of Black Swan
Concerned about cyber security? Need advice or a tailor-made quote? Kevin is here to help you!
From actionable advice to helping you to see where you could be at risk, Kevin will help you to get your business on a path that is secure-by-design and ready for the unthinkable.
Ready to replace sleepless nights with peace of mind? It all starts with an informal chat!
Either schedule a call by selecting a suitable date and time on the calendar or by clicking the button below to send us a message.