Cyber Essentials support · Surrey, Hampshire and Berkshire
Cyber Essentials support from a team certified at Plus level
Cyber Essentials certification should give you a clearer understanding of your security. We assess your current controls, help address gaps and support your preparation for assessment. If a client, tender or insurer has requested Cyber Essentials help, we'll explain the next steps. INDIGO IT holds Cyber Essentials Plus itself.
What Cyber Essentials is
What Cyber Essentials covers
Cyber Essentials is a UK government-backed certification covering firewalls, secure configuration, user access control, malware protection and security update management. These controls address common threats and provide a practical basis for improving your security.
Cyber Essentials uses a self-assessment questionnaire verified by a certification body. Cyber Essentials Plus adds independent technical testing of the controls. Our framework comparison explains how these relate to ISO 27001 and SOC 2.
Cyber Essentials vs Cyber Essentials Plus vs ISO 27001 vs SOC 2
Why businesses come to us
Why businesses come to us about Cyber Essentials
Certification often becomes a priority when a business needs to demonstrate its security to someone else.
A tender or a client questionnaire
A contract may ask for evidence of Cyber Essentials certification. We help you understand the specified level, scope and deadline.
An insurance renewal
If you have been asked about Cyber Essentials for insurance, we help you assess the controls and evidence requested. Requirements depend on your insurer and policy.
A near miss
A suspicious email or missing device can prompt a wider review of access, updates and protection.
Whatever has prompted the enquiry, we start by establishing your current position and what needs to happen before assessment.
A tender or an insurer has told you to get Cyber Essentials. Here's what to do first
Cyber insurance renewals are getting tougher: what insurers now ask
How we get you through it
How we support your Cyber Essentials preparation
Readiness check
We check your devices, Microsoft 365 environment, firewalls and account access against the Cyber Essentials requirements. You get a clear explanation of the gaps and the work needed to address them.
IT audit and health checkGap assessment and remediation
A Cyber Essentials gap assessment turns the findings into a practical work plan. This may include enabling multi-factor authentication, replacing unsupported software, separating administrative access or applying missing updates. We explain which actions sit within your existing managed service and which require additional work.
The assessment itself
We help you prepare accurate answers and supporting information for the questionnaire. For Cyber Essentials Plus, we help prepare the systems in scope for the assessor's technical tests.
Renewal
Cyber Essentials renewal takes place every twelve months. Maintaining the controls throughout the year helps reduce last-minute remediation, but each renewal still needs an assessment against the applicable requirements. An authorised certification body makes the certification decision and issues the certificate. Our role is to help you prepare thoroughly and address identified gaps.
An authorised certification body makes the certification decision and issues the certificate. Our role is to help you prepare thoroughly and address identified gaps.
Cyber Essentials Plus
Cyber Essentials Plus: independent technical assurance
Cyber Essentials Plus certification covers the same five control areas, with independent testing to check that the controls work in practice. We check your environment against the Cyber Essentials Plus requirements and get the devices and systems being assessed ready for testing.
Plus may be required by a contract, or you may choose it for the additional assurance of technical verification. We help you understand the difference and the preparation involved.
INDIGO IT holds Cyber Essentials Plus, so our guidance is informed by practical experience of preparing for assessment.
What it costs
How much does Cyber Essentials cost?
Your Cyber Essentials cost has two parts: the assessment fee charged by the certification body and any work needed to prepare your business.
Preparation depends on your devices, the controls already in place and the certification level you need. We identify the work needed and explain the cost before you commit.
Tell us why you need certification and when. We'll give you a clear starting point and a proposal for the preparation work.
Checklist and resources
Cyber Essentials checklist and resources
The Cyber Essentials requirements explained
Understand the five control areas and how they relate to the systems your business uses.
Cyber Essentials vs the other frameworksMicrosoft 365 security checklist
Review Microsoft 365 access and configuration settings as part of your wider preparation.
Get the checklist25-question cyber security self-assessment
Use the questions to identify areas for further investigation. The self-assessment is a starting point, not a certification decision.
Take the self-assessmentClient feedback
What clients say
“Indigo have really helped me understand what the problem is, what we need to do about it, and put a plan in place. I would recommend Indigo to anybody.”
Roger Wingrove · Managing Director, Newmont Engineering
Cyber Essentials help near you
Cyber Essentials help across Surrey, Hampshire and Berkshire
From Camberley, we provide Cyber Essentials help for businesses in Frimley, Fleet, Farnborough, Basingstoke, Guildford, Woking and the surrounding area.
Much of the preparation for Cyber Essentials or Cyber Essentials Plus can be handled remotely. When devices or the office network need hands-on attention, we come on site.
For businesses looking for Cyber Essentials support in Hampshire, our local guide explains common preparation questions. The same underlying controls also apply to businesses in Surrey and Berkshire.
Cyber Essentials for Hampshire businesses: what to fix before you apply
Making great IT personal and accessible
Meet Matt, Managing Director of INDIGO IT
Matt is passionate about technology and helping businesses to thrive with it. If your tech is in a tangle, he'd love to help you. Whether it's tricky tech, cyber security, or transforming your business's IT to achieve your goals, Matt can offer clear guidance, free from the technobabble.
Ready to make headway to exceptional IT? It all starts with an informal conversation!
Frequently asked questions
Cyber Essentials questions we get asked most
Straight answers about certification, timing and what we do and don't do. If yours isn't here, call us on 01491 693424.
Timing depends on your current controls, the work needed and the certification body's assessment schedule. We review those factors and any deadline before setting a preparation plan.
Start with the requirement in your contract, tender or insurer's request. If no level is specified, we can explain the additional technical assurance offered by Plus and help you choose an appropriate route.
We review the findings and help you address them. Resubmission or retesting arrangements depend on the certification body and assessment terms. Thorough preparation reduces avoidable issues, but we cannot guarantee a pass.
Every twelve months. Ongoing maintenance helps keep the controls effective, while renewal checks your position against the requirements that apply at that time.
Much of the preparation can be completed remotely. We come on site when devices or your office network need hands-on work. The certification body confirms how its assessment will be carried out.
No. An authorised certification body assesses your submission and issues the certificate. We provide preparation and assessment support. INDIGO IT holds Cyber Essentials Plus itself.
Microsoft 365 can be part of the environment covered by your assessment. Relevant considerations include account access, multi-factor authentication and administrative permissions. We review these alongside the other systems in scope.