GLOSSARY / Compliance & Risk
Cyber Essentials Plus
A UK government-backed certification verifying that basic technical security controls, such as patching, access control, and malware protection, are correctly implemented and independently tested.
Back to Glossary
Definition
Cyber Essentials Plus is a UK government-backed certification scheme that verifies an organisation has implemented five fundamental technical controls: secure configuration, boundary firewalls, access control, malware protection, and patch management, and, unlike the base Cyber Essentials tier, has those controls independently tested rather than self-assessed. It's increasingly a baseline requirement for UK public sector and supply-chain contracts.