What is Cyber Essentials
and why does it matter?

Cyber Essentials is a UK government-backed certification scheme that shows your business has the right controls in place to defend against the most common cyber threats. It’s structured around five key controls that, when implemented correctly, protect against up to 80% of common cyber attacks.

Increasingly, Cyber Essentials is a requirement for businesses bidding on government contracts, working in supply chains, and demonstrating to clients that they take security seriously. It also comes with free cyber insurance for qualifying organisations.

Cyber Essentials protects against 80% of common cyber attacks.

The five controls aren’t complicated — but they need to be implemented correctly. We don’t just fill in the form. We make sure your business actually meets the requirements before you submit.

  • ✓Government-backed — recognised by NCSC and UK government departments
  • ✓Required for many government & public sector contracts
  • ✓Free cyber insurance for qualifying businesses (up to £25k turnover)
  • ✓Demonstrates security commitment to clients and partners
  • ✓Cyber Essentials Plus includes independent technical verification
  • ✓Guidance included as part of our premium support

The controls that matter most

Cyber Essentials is built around five technical controls. Getting all five right is what we help you do — before you submit for certification.

🔌

Firewalls

Boundary firewalls and internet gateways configured to block unauthorised access to your network and systems.

⚙️

Secure Configuration

Devices and software configured securely from the outset — default passwords changed, unnecessary features disabled.

🔓

Access Control

Only authorised users can access your systems and data. Least-privilege access — people only get access to what they need.

🛡️

Malware Protection

Anti-malware software installed, active and up to date on all relevant devices. Covers email, web browsing and file storage.

🔄

Patch Management

All software kept up to date — operating systems and applications patched within 14 days of a critical update release.

Our Cyber Essentials process

We don’t just hand you a questionnaire. We work through every control with you — fixing gaps before you submit, so you pass first time.

🔍STEP 1
Gap audit

We review your current position against all five controls and identify what needs to change.

🔧STEP 2
Remediation

We fix the gaps — configuration changes, patch levels, access controls, malware protection.

📋STEP 3
Questionnaire

We help you complete the self-assessment questionnaire accurately and confidently.

🛡️STEP 4
Submission

Your application is submitted to the certifying body for assessment.

🏆STEP 5
Certification

You receive your Cyber Essentials certificate — valid for 12 months.

Cyber Essentials vs
Cyber Essentials Plus

Cyber Essentials is a self-assessment. Cyber Essentials Plus adds independent technical verification — a certified assessor tests your controls directly. Both are valid certifications; Plus carries more weight for government contracts and regulated industries.

  • ✓Cyber Essentials — self-assessment questionnaire, reviewed by certifying body
  • ✓Cyber Essentials Plus — everything in CE plus independent technical testing
  • ✓Both valid for 12 months and need annual renewal
  • ✓Plus is required for some Ministry of Defence supply chain contracts
  • ✓We support both — and advise which is right for your business

Yorkshire businesses trust BOOM I.T.

“
★★★★★

Before BOOM I.T., we were logging tickets and waiting days. Now I ring them, someone picks up, and the problem is sorted the same day.

SJ
Sarah J.
Operations Director, Wakefield
“
★★★★★

They migrated us to Microsoft 365 Business Premium, set up Intune across all our devices and got us Cyber Essentials certified — zero downtime.

MK
Mark K.
Managing Director, Leeds
“
★★★★★

BOOM I.T. treat every problem like it’s their own. They know our systems, our people, and they genuinely care about keeping us running.

LC
Louise C.
Finance Manager, Pontefract
🛡️ Free Security Assessment

How protected is your business really?

Most businesses don't know what they're missing until something goes wrong. Our free Protection Check takes 10 minutes and gives you a clear picture of your cyber risk.

✓No obligation ✓Completed remotely ✓Plain-English report ✓Real expert advice
Start your free Protection Check →

Ready to get Cyber Essentials certified?

Talk to us about starting your Cyber Essentials journey. We’ll assess your current position and give you a clear plan for getting certified — first time, every time.