Is there a Cyber Essentials checklist?

The following checklist applies to both Cyber Essentials and Cyber Essentials Plus requirements, the difference being that with the latter a technical expert conducts a vulnerability scan and remote audit of your IT systems, including a representative set of user devices, all Internet gateways and all servers with services accessible to unauthenticated Internet users.

The questions that will need to be answered include:

  • Are all of your operating systems supported including phones, tablets, servers, workstations etc…?
  • Have all the security patches been applied to the operating systems?
  • Is your Office suite up to date? Is your anti-malware up to date?
  • Are your browsers up to date with security patches?
  • Have you disabled auto-run?
  • Have you disabled remote scripts from being run?
  • Are all of your applications up to date with security patches?
  • Are all the applications used in the organisation supported?
Cyber Essentials has provided a very good base level for our cyber security and has had wide-ranging impact across systems and environments.
Charity
Apply for Cyber Essentials certificationApply for Cyber Essentials Plus

Lexcel: Deconstructing Your Information Management and Security Policy

Published on
16 Jun
2025

URM explains each control law firms must include in an information management and security policy that complies with the Lexcel Practice Management Standard.

Read more
Thumbnail of the Blog Illustration
Cyber Security
Published on
6/6/2025
Understanding Lexcel and the Specialist Quality Mark (SQM): How Cyber Essentials Can Benefit Your Practice

URM’s blog explores how Cyber Essentials can help your legal practice enhance its security posture and achieve/maintain its SQM or Lexcel accreditation.

Read more
Thumbnail of the Blog Illustration
Cyber Security
Published on
28/5/2025
Complying with Cyber Essentials and Cyber Essentials Plus

URM’s blog answers key technical questions about Cyber Essentials and Cyber Essentials Plus, what’s in scope, CE compliant use of BYOD, and more.

Read more
Thumbnail of the Blog Illustration
Cyber Security
Published on
12/5/2025
Mitigating Cyber Risks: Why Cyber Essentials Matters More Than Ever

URM’s blog highlights the growing threat to cyber security in the UK and the importance of the Cyber Essentials scheme in mitigating these risks.

Read more
"
URM has guided us through the Cyber Essentials and Cyber Essentials Plus certifications for the past couple of years. The process has always been straightforward and well-structured, providing us with a clear roadmap to enhance our cybersecurity posture. Achieving these certifications has focused our efforts and significantly boosted our confidence in our security measures, reassuring our clients and stakeholders of our commitment to protecting their data. The rigorous assessment for Cyber Essentials Plus gave us an in-depth understanding of our vulnerabilities and how to address them effectively.
contact US

Let us help you

Let us help you in your compliance journey by completing the form and letting us know how we can best support you.