Yes, the Cyber Essentials Scheme was updated on 28 April 2025 to reflect the evolving nature of cyber threats (increasing adoption of cloud services) and our changing working practices, (particularly the trend towards home working and hybrid working).
With these changes, Cyber Essentials is placing greater emphasis on certain security controls, such as the use of multi-factor authentication, password management and the need to apply ‘critical’ or ‘high-risk’ software update fixes within 14 days of release.
URM has written a blog Cyber Essentials – What’s Changing in 2025? summarising all of the changes that were made to the scheme and addresses questions such as:
- What Were The Key Changes?
- What Changes Will I See When Completing The Questionnaire?
- Were Any Changes Made To Cyber Essentials Plus?
Our URM assessor’s dedication and expertise are truly commendable and he made the entire audit process a positive and productive experience. He is a real asset to your team.
Children's charity
Get practical guidance on preventing common cyber-attacks
Get practical guidance on how to prepare for and achieve Cyber Essentials and Cyber Essentials Plus certification, and protect your organisation against these attacks.
Find out more
related BLog
Cyber Security Case Study: The Human and Organisational Cost of a Breach
Published on
21 Nov
2025
URM’s blog shares a Managing Director’s account of navigating & recovering from a major cyber attack, with a focus on the human impact of the breach.
Read more
Cyber Security
Published on
7/11/2025
Cyber Essentials Requirements UpdateURM’s blog breaks down the latest changes to the Cyber Essentials requirements and outlines why these updates matter for organisations seeking certification.
Read more
Cyber Security
Published on
6/11/2025
Building Cyber Security Resilience Against PhishingURM’s blog explores the different forms of phishing attacks, the strategies used to exploit human vulnerabilities, & how to protect against these attacks.
Read more
Cyber Security
Published on
31/10/2025
Deconstructing the EU Cyber Resilience ActURM’s blog breaks down the new EU Cyber Resilience Act, what products/entities are in scope, the security requirements it imposes on organisations, and more.
Read more
contact US
Let us help you
Let us help you in your compliance journey by completing the form and letting us know how we can best support you.