In order to achieve Cyber Essentials Plus, you must already be certified to Cyber Essentials. Gaining the extra qualification will also involve a technical expert conducting an on-site or remote audit on your IT systems, including a representative set of user devices, all Internet gateways and all servers with services accessible to unauthenticated Internet users.
The assessor will test a random sample of these systems, in line with the test specification, and then decide whether further testing is required. Having achieved Cyber Essentials, you have 3 months to apply for Cyber Essentials Plus.
If it is longer than 3 months, you will need to repeat the Cyber Essentials self-assessment questionnaire stage.
Our URM assessor’s dedication and expertise are truly commendable and he made the entire audit process a positive and productive experience. He is a real asset to your team.
Children's charity
Get practical guidance on preventing common cyber-attacks
Get practical guidance on how to prepare for and achieve Cyber Essentials and Cyber Essentials Plus certification, and protect your organisation against these attacks.
Find out more
related BLog
Cyber Security Case Study: The Human and Organisational Cost of a Breach
Published on
21 Nov
2025
URM’s blog shares a Managing Director’s account of navigating & recovering from a major cyber attack, with a focus on the human impact of the breach.
Read more
Cyber Security
Published on
7/11/2025
Cyber Essentials Requirements UpdateURM’s blog breaks down the latest changes to the Cyber Essentials requirements and outlines why these updates matter for organisations seeking certification.
Read more
Cyber Security
Published on
6/11/2025
Building Cyber Security Resilience Against PhishingURM’s blog explores the different forms of phishing attacks, the strategies used to exploit human vulnerabilities, & how to protect against these attacks.
Read more
Cyber Security
Published on
31/10/2025
Deconstructing the EU Cyber Resilience ActURM’s blog breaks down the new EU Cyber Resilience Act, what products/entities are in scope, the security requirements it imposes on organisations, and more.
Read more
"
URM's penetration testing services have been super efficient and effective. We have always found the outputs of the penetration test to be easily actionable.
contact US
Let us help you
Let us help you in your compliance journey by completing the form and letting us know how we can best support you.