Cyber Essentials Certification Guide

Cyber Essentials is a UK government backed certification scheme that helps businesses protect themselves against common cyber threats. Kixo is Cyber Essentials certified ourselves, and we help other businesses achieve certification too.

What is Cyber Essentials?

Cyber Essentials is a simple, effective framework covering five key technical controls that protect against the vast majority of common cyber attacks. It’s increasingly required by clients, insurers and public sector contracts as proof that a business takes cyber security seriously.

The five controls

Firewalls - ensuring boundary firewalls and internet gateways are properly configured
Secure configuration - devices and software configured securely, removing unnecessary features and default passwords
User access control - making sure only the right people have access to the right systems and data
Malware protection - antivirus and malware protection in place across all devices
Patch management - software and systems kept up to date with the latest security patches

Why certification matters

Beyond the security benefits, Cyber Essentials certification is increasingly a requirement for winning contracts, particularly with public sector organisations and larger businesses who require their suppliers to demonstrate basic cyber hygiene. It can also help reduce cyber insurance premiums.

Cyber Essentials vs Cyber Essentials Plus

Cyber Essentials is a self-assessed certification, verified by an external assessor. Cyber Essentials Plus involves a more thorough, hands-on technical audit of your systems. We can advise on which level is right for your business and its requirements.

How we help

We help businesses prepare for and achieve Cyber Essentials certification, addressing any gaps in advance so the assessment goes smoothly, and maintaining the required standards afterwards as an ongoing part of your IT support.