Get Cyber Essentials Certified
Secure the Cert. Win the Work® - Secure your business, win and protect trust and access £25,000 in free cyber insurance coverage.
Need Cyber Essentials for a tender, contract or customer?
Without Cyber Essentials, you may be blocked from tenders before anyone reads the rest of your proposal.
We help small businesses prepare for Cyber Essentials, sort the obvious gaps, and complete the process with confidence.
No pressure. We’ll ask what has triggered the requirement, check where you are now, and explain what needs fixing before you submit.
This page is for you if:
- A customer has asked for Cyber Essentials
- You need it for a tender or supplier questionnaire
- Your insurer has mentioned it
- You've started the assessment and got stuck
- You want the certificate, but also want the basics done properly
Glitch & Black Swan explain
Five common ways in. Five ways to make Glitch’s job harder.
Cyber Essentials focuses on five technical controls that help protect against common cyber attacks. Here is what they mean when Glitch starts looking for a way into your business.
Glitch
Looking for the easy way in
“I was hoping you’d missed the basics.”
An unnecessary connection. An old application. An account with too much access. Glitch would much rather find an overlooked gap than work for his next opportunity.
Black Swan Cyber
Your security partner
“Let’s check the controls are doing their job.”
We help you understand the assessment scope, check your setup against the requirements and work with your IT team to fix gaps. We help you prepare accurate answers for assessment and understand what needs maintaining afterwards.
Firewalls
Glitch: “I’ll try that connection from the internet.”
Control which connections can reach your systems. Blocking unnecessary access gives Glitch fewer routes to try.
Secure configuration
Glitch: “I wonder what they left switched on.”
Remove unnecessary software and services, and replace insecure default settings. Give Glitch less to work with.
Security update management
Glitch: “They still haven’t installed the fix.”
Keep software supported and apply security updates promptly. Close known weaknesses instead of leaving them available to exploit.
User access control
Glitch: “Everyone’s an administrator? How helpful.”
Give people only the access they need and remove it when no longer required. Limit what Glitch could do with a misused account.
Malware protection
Glitch: “Just open this little file for me.”
Use appropriate malware protection to detect or prevent malicious software from running. Make it harder for Glitch’s payload to cause harm.
A useful foundation for protection, with certification to demonstrate it.
Cyber Essentials can help you meet customer and tender requirements while improving the basics. It reduces risk; it does not guarantee Glitch can never get through. Backups, staff awareness and incident response still matter.
How we help you get ready for Cyber Essentials
We keep the process practical. No scare tactics. No overcomplicated consultancy speak. Just a clear route from "we need Cyber Essentials" to "we're ready to submit".
Tell us what's triggered it
Tender, contract, insurance, supplier requirement or customer request - we'll work out what level of support you need.
We check the likely gaps
Firewalls, updates, access control, malware protection and secure configuration are reviewed before you submit. We also help you work out which devices and cloud services are in scope - one of the most common points of confusion.
We help fix what matters
That might mean tightening Microsoft 365, sorting admin rights, improving patching, reviewing devices or strengthening endpoint protection.
You submit with confidence
We help you understand the questions so your answers reflect what's actually in place. If you want to understand the full process first, read our plain English guide to passing Cyber Essentials.
In simple terms: we review where you are → fix what matters → guide you through it → and get you submitted properly.
Common mistakes we help you avoid
Guessing the answers
The questions can look simple, but the wrong answer can cause problems later. We help you understand what they mean.
Leaving patching to chance
Updates need to be under control. If nobody is sure what updates, when it updates or who checks it, that can cause problems during the assessment.
Shared accounts
Shared logins might be convenient, but they can cause issues around access control and accountability. This includes third-party access - contractor and subcontractor scope catches a lot of businesses out.
Admin rights everywhere
Too many people with too much access increases risk and can make certification harder.
Assuming antivirus is enough
Protection needs to be suitable, managed and visible. Installed does not always mean properly controlled.
Rushing at the last minute
If a contract deadline is looming, it's tempting to rush. We help keep it focused and sensible.
From the field
One Cyber Essentials assessment started with "We're pretty sure we've got everything covered."
Two hours later we'd found unsupported software, dormant accounts and devices nobody realised were still connecting.
Preparing for Cyber Essentials is often about uncovering the things that have quietly built up over time.
Cyber Essentials should not just be a form-filling exercise. Used properly, it gives you a cleaner, safer, more manageable setup. If you don't have Cyber Essentials, you could be losing out on work before you've even had the conversation.
Need the full breakdown?
This page is the quick "start here" version. If you want the fuller explanation of the five controls, how we help, local support, FAQs and related cyber security layers, visit our main Cyber Essentials support page. Or if you prefer to work through it yourself first, our step-by-step guide to passing Cyber Essentials covers scope, devices, cloud services and the five controls in plain English.
Cyber Essentials help in Chesterfield, Sheffield and Derbyshire
Black Swan Cyber Security Solutions supports small businesses across Chesterfield, Sheffield, Derbyshire, South Yorkshire and North East Derbyshire with Cyber Essentials preparation and wider cyber security improvements.
What good looks like
You understand what the Cyber Essentials questions mean. The obvious gaps are fixed before you submit. Your devices, accounts, updates and protection are in better shape. And when a customer, insurer or supplier asks for evidence, you have a clearer answer.
The aim is not just to get the badge. It is to help you win trust, reduce risk and avoid being blocked from opportunities you are otherwise ready for.
Cyber Essentials FAQs
How quickly can we get Cyber Essentials?
It depends on your current setup. Some businesses are ready within a few days, others need a bit more work to fix gaps first. We'll give you a realistic view early on.
Do we need new software to pass Cyber Essentials?
Not always. Many businesses already have the right tools in place but need configuration, visibility or access tightened to meet the requirements.
Can we just fill in the questionnaire ourselves?
You can, but it's easy to misinterpret the questions. They relate to real technical controls, so getting guidance helps avoid delays or failed submissions. Our guide to passing Cyber Essentials is a good starting point if you want to prepare before you get in touch.
Do you work with our existing IT provider?
Yes. We often work alongside existing IT providers to help businesses meet Cyber Essentials requirements without disrupting day-to-day support.
What happens if we fail Cyber Essentials?
If your submission is not successful, you'll usually get feedback and the chance to correct issues. We help you fix those gaps and resubmit with confidence.
Is Cyber Essentials enough on its own?
It's a strong baseline, but most businesses benefit from additional protection around endpoints, identity, email and staff awareness once the basics are in place.
Do we need to stop work to get certified?
No. Most of the work can be done alongside your normal day-to-day operations with minimal disruption.
Support beyond the certificate
You do not need all of this to start Cyber Essentials. These are the areas many businesses look at once the basics are under control.
Huntress Managed EDR
24/7 managed endpoint detection and response for threats that need investigation.
Huntress ITDR
Microsoft 365 identity threat detection for suspicious logins, account takeover and risky behaviour.
Security Awareness Training
Practical training to help staff spot phishing, scams and everyday cyber risks.
Goldphish
Modern phishing simulations and awareness content that feels more engaging.
Email Security
Reduce phishing, impersonation and malicious email before it reaches your team.
Microsoft 365 Backup
Separate backup for Microsoft 365 email and files, because retention is not the same as backup.
Meet Kevin: Founder of Black Swan
Concerned about cyber security? Need advice or a tailor-made quote? Kevin is here to help you!
From actionable advice to helping you to see where you could be at risk, Kevin will help you to get your business on a path that is secure-by-design and ready for the unthinkable.
Ready to replace sleepless nights with peace of mind? It all starts with an informal chat!
Either schedule a call by selecting a suitable date and time on the calendar or by clicking the button below to send us a message.