What Cyber Essentials Covers

Cyber Essentials focuses on five essential security controls proven to prevent the majority of cyber attacks:

Multi-Factor Authentication (MFA)
Adds a second layer of protection to your accounts, reducing the risk of stolen credentials.

Secure Configuration
Ensures devices, laptops and systems are set up securely and don’t use default settings or unnecessary access.

Patching & Updates
Keeps systems protected from known vulnerabilities by ensuring updates are applied consistently and on time.

Malware Protection (EDR)
Modern protection that detects suspicious behaviour, not just traditional viruses.

Access Control
Ensures only the right people have access to the right systems and leavers are removed promptly.

These controlled areas form the foundation of strong, practical cyber security for any organisation.

Cyber Essentials vs Cyber Essentials Plus

Choosing the right level of certification depends on how much assurance your organisation or your clients, insurers and regulators require. Here’s a simple breakdown to help you understand the difference.

Why choose Cyber Essentials (Basic)

Cyber Essentials is a self-assessed certification that confirms your organisation has the essential controls to protect against common cyber attacks. It’s ideal for establishing a strong security baseline, meeting insurer or client requirements, or beginning to improve your overall cyber posture. For most organisations, it’s a simple, practical first step

What it includes:

• Self-assessment questionnaire
• Verification by an IASME-approved certification body
• Focus on the five core security controls
• Suitable for the majority of SMEs
• Accepted by many insurers as proof of baseline cyber hygiene
• Often required for supply chain and tender participation

Why Choose Cyber Essentials Plus

Cyber Essentials Plus provides an independently audited, hands-on assessment to verify that your security controls work in practice. It’s ideal if you need higher assurance, work in a regulated sector, or want external validation that your systems, devices and protections meet recognised standards. It’s the natural next step once Cyber Essentials is complete.

What it includes:

• All requirements of Cyber Essentials
• On-site or remote technical assessment
• Vulnerability scans on selected devices
• Testing of patching, MFA and secure configuration
• Email and browser attack simulations
• Evidence that controls work in practice, not just on paper

Ready to Strengthen Your Cyber Security?

Choose the next step that suits you:

Book Your Cyber Essentials Readiness Review – A short assessment to understand your current posture and plan your path to compliance.

Download Your Cyber Essentials Guide – A practical guide to help you understand the key controls, identify gaps, and take the first steps towards certification.

Why Advantex

Advantex supports organisations at both levels of certification, from initial Cyber Essentials to the more in-depth Cyber Essentials Plus. We assess your current posture, close any gaps, deploy the required controls and guide you through the full certification process.

Our ongoing managed IT support helps you maintain compliance long after certification, and both levels align naturally with our Cyber Essentials Readiness Package for complete confidence on assessment day.