Cyber Essentials and Cyber Essentials Plus Changes 2026 Summary

On 27 April, the Cyber Essentials and Cyber Essentials Plus schemes will move to a new question set, Danzell, replacing the current Willow requirements.
These changes introduce updated expectations around security controls, evidence, and scope. For some organisations, meeting the new requirements may require additional preparation or internal changes.
To support our clients, we have created a concise PDF that summarises the upcoming changes and explains what they mean in practical terms.

What the PDF covers

The document provides a clear overview of:

  • The key changes to the Cyber Essentials scheme
  • Differences between the Willow and Danzell question sets
  • Areas that may be more challenging under the new requirements
  • What organisations should consider ahead of their next certification

Register to download the PDF

Complete the form below to access the PDF.
After registering, you will receive immediate access to the document.

Key dates

  • 24 April at 5pm (BST) is the final day to register under Willow.
  • Organisations registered by this date will continue to be assessed against Willow, even if assessment takes place after the move to Danzell.
  • Registered organisations have six months to complete certification under Willow requirements.

How to certify under Willow

If you would prefer to achieve Cyber Essentials certification under the current requirements, you can still do so by registering before 27 April.
To proceed, you can:

Need advice?

If you would like to discuss the upcoming changes, your readiness for Danzell, or whether it makes sense to register under Willow, our consultants are available to help. Contact us on sales@urmconsulting.com.

In order to access a copy of URM’s White Paper please register below.

Register to download

Please note, we can only process business email addresses.

"
I am pleased to share my experience with the Cyber Essentials Plus (CE+) Scheme. This certification has been invaluable to Case Pilots in helping us protect ourselves from cyber threats. The comprehensive and user-friendly process provided by URM Consulting gave me a deep understanding of the latest threats, vulnerabilities and best practices in cyber security. The assessors were highly knowledgeable, experienced and able to explain each step of the process clearly and concisely. What I particularly appreciated about the CE+ scheme was its relevance to the real world. The training covered not only the fundamental principles, but also advanced techniques and strategies that are used by professionals to protect their systems and data. Achieving the certification demonstrates to our clients that we are committed to cyber security and that we have the knowledge and skills to protect their data. I highly recommend the Cyber Essentials Plus Scheme to any organisation that is serious about cyber security.