Cyber Essentials

Cyber Essentials (CE) is a government-backed cyber security certification scheme designed to help organisations protect themselves against the most common internet-based threats. It focuses on five key controls that protect organisations from the majority of common cyber attacks:

1. Firewalls: Creating a barrier between the internet and your network.
2. Secure Configuration: Ensuring systems are set up securely to minimise vulnerabilities.
3. Security Update Management: Keeping software up-to-date to close security gaps
4. User Access Control: Restricting access to sensitive data and systems.
5. Malware Protection: Preventing malicious software from causing harm.

Cyber security isn’t just an ‘IT problem’, it’s a business resilience issue.  Around 43% of UK businesses report experiencing a cyber security breach or attack, and the consequences can be serious: financial loss, disruption, reputational damage, and legal or regulatory consequences, particularly where customer or staff data is involved.

What’s important to understand is that most attacks aren’t personal. Around 95% of cyber crime is opportunistic: criminals look for organisations with easy-to-exploit weaknesses, such as:

• No multi-factor authentication (MFA) on key accounts
• Out-of-date software missing critical security updates
• Staff using administrative accounts for everyday tasks

These are the kinds of gaps that Cyber Essentials is designed to close.

SMEs are also increasingly connected through supply chains. Weak security in one organisation can expose customers, partners, and suppliers to risk. That’s why more businesses now ask their suppliers to demonstrate a recognised cyber security baseline — and Cyber Essentials is one of the most widely accepted ways to do that.

• Protection against common threats

Cyber Essentials focuses on five practical controls that significantly reduce the risk of common internet-based attacks, including ransomware.

• A clear baseline you can prove

Certification shows you’ve put the most important cyber security controls in place, providing reassurance to customers, suppliers and stakeholders.

• Supports tenders and supplier onboarding

Cyber Essentials is widely recognised and is often requested when bidding for contracts, especially in government and regulated supply chains.

• Builds good habits without a big-budget programme

Many organisations find it acts as a practical checklist, helping embed secure working into day-to-day routines.

• Cost-effective

Certification typically costs £320–£600 + VAT, depending on the size of your organisation.

• Included cyber liability insurance

When a UK-domiciled organisation with a turnover under £20m achieves self-assessed certification covering their whole organisation to Cyber Essentials they are entitled to cyber liability insurance — with 24/7 technical + legal incident response— at no extra cost.

Cyber Essentials Resources for Chambers

This resource brings together the key tools, guidance, and support options in one place, so you can navigate the steps with confidence and build a clear path to certification.

Get Cyber Essentials certified

Members of BCC-participating Regional Chambers can request a discount code from their Chamber for £10 off Cyber Essentials certification.