The Cyber Essentials framework exists because the majority of successful cyber attacks exploit basic, preventable weaknesses. This audit tells you whether yours are covered.
Small businesses are attacked more often than large ones, not less. Attackers go for easy targets. An unpatched device, a weak password policy, an overly permissive firewall, any of these can be enough.
Cyber Essentials is the government-backed standard that sets out five basic security controls. If you’ve got them in place, you’re protected against the vast majority of common attacks. If you haven’t, you’re more exposed than you probably realise.
Our audit checks your business against each of the five controls and gives you a plain-English report on where you stand and what to do about it.
The Five Controls
Firewalls – is your network boundary properly protected?
Secure configuration – are your devices and software set up securely by default?
User access control – do the right people have the right access, and no more?
Malware protection – are you protected against malicious software?
Patch management – are your devices and software kept up to date?
What you get
A written audit report covering each control area, your current position, any gaps, and a prioritised set of recommended actions, written for a business owner, not an IT manager.
Who is this for?
Business owners and managers in small and medium businesses who want to know whether their basic cyber security is fit for purpose. It’s particularly useful if you’re thinking about applying for Cyber Essentials certification, bidding for contracts that require it, or just want honest reassurance that you’re not leaving obvious doors open.
Pricing
Fixed price. No hidden extras.
£395 (ex VAT)
Need more than just the audit? If you’d like ongoing support to implement the recommendations and keep your security in good shape, take a look at our Business Support Plans, or get in touch and we’ll talk through what makes sense for your business.
Ready to start your audit?
Contact us to book your Cyber Essentials Audit.
FAQs
Is this the same as Cyber Essentials certification?
No. This is an independent audit against the framework. It tells you where you stand and what you’d need to do to achieve certification, but certification itself is handled by an accredited assessor. We can point you in the right direction once the audit is done.
Do I need Cyber Essentials certification?
Some contracts, particularly public sector and MOD supply chain work, require it. Even if yours don’t, the standard is a solid baseline for any small business that takes security seriously.
How long does the audit take?
The assessment is typically done remotely and takes half a day, with a report to follow within five working days.