Question 1

What is the Cyber Essentials scheme?

Accepted Answer

Cyber Essentials is a UK government-backed certification scheme, run by the National Cyber Security Centre (NCSC) with IASME as the delivery partner. It shows that a business has five basic technical controls in place that protect against the most common cyber attacks.

Question 2

When was Cyber Essentials launched?

Accepted Answer

The UK government launched Cyber Essentials in June 2014. From 1 October 2014 it became mandatory for central government contracts that involve handling personal data or providing certain ICT services.

Question 3

Who needs Cyber Essentials?

Accepted Answer

Any business bidding for a UK central government tender that involves handling citizens' personal or sensitive data, or supplying certain technology products and services. Many councils, NHS bodies, the Ministry of Defence and large private companies also ask their suppliers for it. It is a good idea for any UK SMB that stores customer data.

Question 4

Is Cyber Essentials required for UK public tenders?

Accepted Answer

Yes, for central government contracts that involve personal data or certain ICT services. Buyers usually ask for your certificate in the tender questions, and without it your bid can be marked as non-compliant.

Question 5

How is Cyber Essentials enforced?

Accepted Answer

It is enforced through procurement rules rather than fines. Government buyers make certification a condition of the contract, so if you don't hold a valid certificate you can be excluded from the tender or lose the contract. Defence suppliers face extra requirements under MoD rules.

Question 6

When is Cyber Essentials checked?

Accepted Answer

Usually at the tender stage, when you submit your bid, and again before the contract is awarded. Buyers can also check that your certificate is still valid during the contract and at renewal. Certificates can be looked up on the IASME public register.

Question 7

How often do you need to renew Cyber Essentials?

Accepted Answer

Every 12 months. A certificate is valid for one year, and government contracts expect it to stay valid for the whole contract. Our package includes an annual checkup so you are ready to renew on time.

Question 8

How is Cyber Essentials tested?

Accepted Answer

Basic Cyber Essentials is an online self-assessment questionnaire about your firewalls, device setup, updates, user access and virus protection. A director signs it off and an independent certification body marks it. There is no on-site technical test at this level.

Question 9

What does the government require under Cyber Essentials?

Accepted Answer

Five controls: firewalls, secure configuration of computers and cloud services, security update management (critical fixes within 14 days), user access control including multi-factor authentication for cloud services, and malware protection. Certification must then be renewed every year.

Question 10

What is the difference between Cyber Essentials and Cyber Essentials Plus?

Accepted Answer

Both cover the same five controls. Cyber Essentials is a verified self-assessment. Cyber Essentials Plus adds a hands-on technical audit where an assessor tests a sample of your devices and accounts, including vulnerability scans. Plus must be completed within three months of passing basic Cyber Essentials, and it is often asked for on higher-risk contracts.

Question 11

Is Cyber Essentials worth it?

Accepted Answer

For firms bidding on UK public contracts it is essential — without it you can't win many tenders. It also lowers the risk of common attacks, can help with cyber insurance, and reassures customers. For most SMBs the cost is small compared with the value of a single contract.

Question 12

How long does it take to get Cyber Essentials?

Accepted Answer

If your IT is already in good shape it can take a few weeks. Most SMBs need some fixes first — such as updating old devices, turning on two-step login or tightening firewall rules — which our managed package handles for you.

Question 13

How much does the Teamscope Cyber Essentials package cost?

Accepted Answer

Our fully managed prep package starts at £10,000. It is designed for firms bidding for, or that have just won, a UK public contract, and covers gap review, fixes, evidence and guidance through certification.

Question 14

Where can I read more about Cyber Essentials?

Accepted Answer

The official NCSC Cyber Essentials page and the IASME website both give background on the scheme.

Win UK government contracts. Get Cyber Essentials.

Cyber Essentials Requirements

Advanced Firewall Setup

Secure Computer and Cloud Setup

Security Updates

Computer and Data Access Control

Computer Virus Protection

Annual Checkup

From £10,000

Cyber Essentials FAQ

From £10,000