Skip to main content

Global compliance research

Compare requirements

Compare up to four records before opening the official authority or scheme guidance. A comparison does not establish which requirements apply to your organization.

Educational comparison · draft fields remain unverified
ComparisonCyber Essentials certification
TypeCertification
Review statusOverview verified 2026-09-27
JurisdictionUnited Kingdom
Authority / scheme ownerNational Cyber Security Centre / IASME
Potential applicabilityOrganizations seeking baseline cyber security assurance, including suppliers whose customers require it. Check the contract and scope rather than assuming every UK business must certify.
Application / assessmentUse IASME or a licensed certification body. Cyber Essentials uses an assessed self-assessment; Cyber Essentials Plus adds technical testing of the same control areas.
Preparation evidence
  • Define which systems and organizational units will be in the assessment scope.
  • Review the current question set and requirements for the five technical controls.
  • Decide whether the requesting customer needs Cyber Essentials or Cyber Essentials Plus.
RenewalConfirm the certificate expiry date and current renewal requirements with IASME or the selected certification body before relying on a certificate.
Current edition / statusCurrent scheme guidance; confirm the assessment question-set version when applying
Next review2026-12-27
Official next stepOfficial application or guidance
ChecklistDownload reviewed preparation checklist (.txt)

On small screens, scroll the table horizontally to compare each requirement. Verified means the published overview was checked against its named sources. It does not mean your organization is compliant, certified or licensed.

Compare licenses and compliance requirements | QuickTrust