ASSURENSIX
Cyber Essentials & CE+ for SMEs
Meet NCSC standards with confidence. We provide a clear, jargon-free path for UK SMEs to achieve Cyber Essentials and technical CE+ testing, protecting your valuable data and reassuring your clients.
Cyber Essentials / CE+ for SMEs
Meeting NCSC standards shouldn't feel like an impossible task. We help organizations build foundational security controls that not only protect assets but reassure clients through verified certification. Cyber Essentials (CE) is your first line of defense against common cyber threats.
For businesses requiring higher assurance, Cyber Essentials Plus (CE+) adds an extra layer of confidence through a technical audit of your actual systems. Our team provides concise guidance on how the engagement works and who it's for, ensuring a smooth path to accreditation without IT burnout.
Cyber Essentials / CE+ Security MOT – Quick Self‑Check
Use this quick MOT to see how close you are to Cyber Essentials (and where CE+ testing might bite). Answer Yes / Partial / No and jot brief notes.
1. Firewalls & Internet Gateways
- Are all internet connections protected by a firewall or router with a password that is not the factory default?
- Are only the network services/ports that are genuinely needed open to the internet?
- For remote access (VPN, RDP, etc.), is access locked down (e.g. MFA, limited users, restricted IPs)?
3. User Access Control
- Do all users have individual accounts (no shared logins) for systems and email?
- Is MFA enabled for all remote access and cloud admin accounts, and ideally all users?
- Are joiners, movers and leavers handled via a simple, reliable process (accounts created/changed/removed promptly)?
5. Security Update Management
- Are operating systems and applications set to install security updates automatically where possible?
- Are unsupported or end-of-life systems (e.g. old Windows versions) removed or isolated?
- Is there a simple routine (e.g. monthly) to check that critical patches have been applied?
2. Secure Configuration
- Are unused user accounts, software and services removed or disabled on laptops, servers and cloud services?
- Are standard security settings (e.g. password policy, screen lock, device encryption) applied consistently across all devices?
- Are admin / default accounts renamed or disabled where possible, with strong unique passwords?
4. Malware Protection
- Is anti-malware (AV/EDR) installed and active on all company-managed laptops and desktops?
- Are real-time protection and regular scans enabled, with alerts checked (even if just via a simple dashboard)?
- Are users restricted from installing unauthorised software where possible?
On your Cyber Essentials / CE+ Call, we’ll walk through this quick Security MOT together and highlight your top 3–5 priorities.
Check Your CE+ Readiness
Ready to secure your Cyber Essentials certification? Fill out the form below to book your readiness assessment and protect your NHS and MoD supply chain contracts.