Preparing for Cyber Essentials and Cyber Essentials Plus Certification
Effective preparation for Cyber Essentials or Cyber Essentials Plus goes beyond simply understanding the scheme’s mandatory requirements – knowing what makes for a smooth and successful assessment, one that sets you up for straightforward ongoing compliance, is also critical.
In this short video, we share our top practical tips for achieving seamless certification to the scheme, as well as common self-assessment questionnaire (SAQ) mistakes that frequently trip up organisations. We also offer guidance on preparing for Cyber Essentials Plus, highlighting pitfalls our assessors often see during the hands‑on technical assessment and how to avoid them.
This clip is taken from URM’s webinar on Cyber Essentials and CE Plus: Certification Success & Ongoing Compliance.
Cyber Essentials and Cyber Essentials Plus - 5 Technical Control Areas
To achieve Cyber Essentials certification, one of the first steps is gaining a solid understanding of the scheme’s requirements and how your organisation will meet them.
In this video, we explain Cyber Essentials’ five technical control areas (firewalls, secure configuration, security update management, user access control, malware protection), breaking down what you need to have in place for each control area. We also explore some common obstacles to meeting requirements and how these can be overcome. This guide gives you a clear introduction to the measures you’ll need to implement if you decide to certify.
This clip is taken from URM’s webinar on Cyber Essentials and CE Plus: Certification Success & Ongoing Compliance.
What Are the Differences Between CE and CE Plus?
For organisations deciding whether Cyber Essentials or Cyber Essentials Plus is right for them, having a clear understanding of what each certification involves is essential.
In this short video, we break down how CE and CE Plus differ, outline the key steps involved in a CE Plus assessment, and explain what is and is not in scope for the audit. We also cover how CE Plus works in businesses with fully remote teams and cloud‑based infrastructure, offering clear guidance on what assessments look like for these modern setups. This quick overview gives you practical advice on what to expect from both types of assessment under the Cyber Essentials scheme.
This clip is taken from URM’s webinar on Cyber Essentials and CE Plus: Certification Success & Ongoing Compliance.
What Are Cyber Essentials and Cyber Essentials Plus?
As cyber threats intensify, understanding the fundamentals has never been more important.
This short video provides an overview of the UK government-backed Cyber Essentials scheme. We break down what the scheme is and how it works, the steps to certification, as well as sharing some key facts and statistics that explain its growing popularity and relevance in the current cyber landscape. This quick guide gives you a fast, accessible introduction to one of the UK’s most widely adopted cyber security standards.
This clip is taken from URM’s webinar on Cyber Essentials and CE Plus: Certification Success & Ongoing Compliance.
The Current Cyber Threat Landscape
Think your organisation would spot a cyber breach before it’s too late? This short video reveals why so many businesses still fall victim to attacks. Our experts break down the most common threats, the human errors and weak processes that help attackers succeed, and the simple steps that can make your business more secure. This overview gives you a clear picture of today’s cyber risk landscape and what you can do to stay ahead.
This clip is taken from URM’s webinar on Building Cyber Resilience – Practical Steps for Reducing the Likelihood and Impact of a Cyber Breach.
URM’s blog unpacks the DSG vs. ICO case, how it reached the Court of Appeal, & the Court’s decision on the status of pseudonymised data in the hands of attacker
URM’s blog explains the building blocks of information security risk, outlining how risks can be valued and prioritised, the role of rise appetite, and more.
URM’s blog explores how DSARs can be used to drive improvements, and share our insights on managing other data subject rights efficiently and effectively.
URM’s blog explains the recent open letter to suppliers issued by the NHS, what it means, why it matters, and the practical steps you can take to prepare.
URM’s blog unpacks the Identify Function of the NIST CSF, providing a detailed breakdown of its requirements and what you need to do to meet them.
URM’s blog analyses the ICO’s enforcement action in 2025, highlighting surprising trends in its approach to enforcing compliance with data protection law.
URM provide ten actionable top tips that will allow you to take significant steps forward in your compliance journey.
URM’s blog explores the importance of cyber resilience & the steps organisations can take to prepare for and mitigate the impact of a cyber incident.
URM’s blog explores common weaknesses in organisations’ security programmes, & outlines practical, cost-effective measures to reduce the likelihood of a breach
Read URM’s blog, where we explore the importance of clock synchronisation for cyber security and resilience, and how to meet the requirements of Control 8.17.
URM’s blog explores the ICO’s guidance on business emails in DSARs & examine the implications of a recent ruling on the subject by the French Court of Cassation
URM’s blog explores key updates to medical device standards, regulations & guidance documents, helping manufacturers understand what’s coming & how to prepare.
If uncertain, URM is able to conduct a high-level GDPR gap analysis which will assist you understand your current levels of compliance and identify gaps and vulnerabilities.
URM can offer a host of consultancy services to improve your DP policies, privacy notices, DPIAs, ROPAs, data retention schedules and training programmes etc.
As a CREST-accredited penetration testing organisation, URM can complete internal and external penetration tests.
