How much does it cost for a basic Level Cyber Essentials assessment?

As of 24 January 2022, a tiered pricing structure was introduced by the National Cyber Security Centre (NCSC) and their scheme delivery partner, the IASME Consortium, to reflect the additional time involved in assessing the larger, more complex organisations.

The full pricing as of 08 May 2025:

Company Size* Cyber Essentials Assessment Cost
Micro = 0 – 9 employees £320
Small = 10 – 49 employees £440
Medium = 50 – 249 employees £500
Large = 250 or more employees £600

*adopts the internationally recognised definition for micro, small, medium and large enterprises

We want to pass on our thanks to our URM assessor for helping us with the assessment. He made it really very straightforward for us during the remote sessions and during the follow ups to understand what we needed to do to remediate the issues and obtain the certification. He understood our setup and gave us relevant advice, it was a pleasure working with him.
Engineering company
Apply for Cyber Essentials certificate

NHS Cyber Security Open Letter: What Does it Mean for Suppliers?

Published on
16 Feb
2026

URM’s blog explains the recent open letter to suppliers issued by the NHS, what it means, why it matters, and the practical steps you can take to prepare.

Read more
Thumbnail of the Blog Illustration
Cyber Security
Published on
19/1/2026
Minimising the Impact When a Breach Occurs

URM’s blog explores the importance of cyber resilience & the steps organisations can take to prepare for and mitigate the impact of a cyber incident.

Read more
Thumbnail of the Blog Illustration
Cyber Security
Published on
9/1/2026
Strengthening Your Cyber Defences: Practical Steps for Every Business

URM’s blog explores common weaknesses in organisations’ security programmes, & outlines practical, cost-effective measures to reduce the likelihood of a breach

Read more
Thumbnail of the Blog Illustration
Cyber Security
Published on
18/12/2025
Deconstructing the EU Cyber Resilience Act

URM’s blog breaks down the new EU Cyber Resilience Act, what products/entities are in scope, the security requirements it imposes on organisations, and more.

Read more
"
The guidance and support we’ve received from URM during the process for both certifications have been exceptional, putting us at ease and providing clear and concise explanations and advice to ensure we met all the necessary requirements. We would not hesitate to recommend them.
contact US

Let us help you

Let us help you in your compliance journey by completing the form and letting us know how we can best support you.