In this blog post, we'll cover:

• What are the two levels of the Cyber Essentials certification?
• How much does the Cyber Essentials certification cost?
• What are the differences between the Cyber Essentials and Cyber Essentials Plus certification?
• How will your organisation benefit from a Cyber Essentials Certification?
• How long till you have to renew your Cyber Essentials certification?
• What happens if you do not certify?
  
  
  

What are the two levels of the Cyber Essentials certification?

Cyber Essentials certification is the only industry-backed certification in the field of cybersecurity. It covers all aspects of cybersecurity technology and solutions, including cybersecurity policy and procedure, information security management and risk management.

There are two levels of Cyber Certification: basic and plus. Here is a quick breakdown of what each level entails:

Cyber Essentials basic level certification

• A requirement to work within the industry.
• Provides security against a number of the most prevalent Cyber Security threats.

Cyber Essentials Plus certification

• Focused on the specific skills needed to accomplish a particular task rather than what those tasks entail.
• Ensure that your organisation is secured against basic hacking and phishing threats and attacks.

How much does the Cyber Essentials certification cost?

Both certifications were created to help businesses and individuals understand the risks of cybercrime and how to protect themselves against them.

The total cost of Cyber Essentials certification varies depending on multiple factors:

• Which certification level do you require?
• What kind of safety measures have you taken?
• How durable are those safety measures?
• Penetration testing
• Your areas for improvement
• How long does it take to conduct a thorough evaluation and make necessary changes?
  
  

The basic costs for each certification are as follows:

1. Cyber Essentials basic level certification cost

The Cyber Essentials Certification is a great way to start your career in Cyber Security. The certification is offered by the National Cyber Security Centre (NCSC) and is designed to help employees improve their knowledge in cyber security.

The certification authority that governs Cyber Essentials Certification, IASME, charges the following fees:

• ​​Small organisation with 0-9 employees is £300 + VAT
• Small organisation with 10 to 49 employees is £400 + VAT
• Medium organisation with 50-249 employees is £450 + VAT
• Large organisation with 250 or more employees is £500 + VAT

Organisations based in the UK with a revenue of under £20 million are also automatically covered against cyber liability.

Organisations must, however, take into account the costs of preparing for the evaluation and of aligning their activities with the five controls of the scheme: Anti-malware programs, patch management tools, network access controls, and firewall configurations all fall under this category.

There is up to 6 month time limit on completing and submitting your online application and accompanying questionnaire for review. You have to reapply and pay again if you do not submit within that time frame. Those who fail the Cyber Essentials questionnaire can retake it for free within two days and have their answers and have their answers reviewed.

However, you are required to pay the whole fee again if you fail for the second time or resubmit after the 48-hour time period has ended.

2. Cyber Essentials Plus certification cost

This Cyber Essentials Certification costs more than the basic Cyber Essentials Certification as it is the highest level standard in Cyber Essentials. Depending on the size of your organisation, the cost of preparing for Cyber Essentials Plus will vary. The certification fee typically ranges between £1,900 and £4,000 + VAT.

What are the differences between the Cyber Essentials and Cyber Essentials Plus certification?

Cyber Essentials and Cyber Essentials Plus Certifications are both relevant for your organisation, but there are some key differences.

The Cyber Essentials certification is a great way to train your employees in cybersecurity. It is affordable, easy to complete and has the potential to open up opportunities for your organisation.

How will your organisation benefit from a Cyber Essentials certification?

Your company is probably tied to a potential target of a cyberattack, regardless of its size. Cyber Essentials Certification is important for small organisations because it helps you understand the basics of cybersecurity and how to implement safe practices.

Here are a few additional benefits:

1. Ability to train your employees on cybersecurity

You will be able to offer a clear message about Cyber Security training and make sure that your team members understand what they need to do. When you have employees who understand the importance of cybersecurity, they are more likely to take steps towards protecting themselves from Cyber-attacks. Your team will know how to respond in a crisis situation, whether it is an actual attack or just a small breach of security. 

2. Prevent around 80% of cyberattacks

As part of the Cyber Essentials scheme, installing the five fundamental security policies will help mitigate the effect of threats like Phishing scams, Malware, ransomware, attacks based on password guessing, and attacks on the network. 

3. Demonstrate supply chain security

Supply chain security is a term used to describe the security of your supply chain. It includes everything from physical security to the supply chain itself, which includes the movement of goods and information between suppliers and customers.

4. Win new organisations and gain customer/client loyalty

When customers and clients see that your organisation has Cyber Security measures in place such as the Cyber Essentials Certification, not only will you be able to attract new customers, you will also be able to reassure them that their information is safe within your organisation.

5. Be listed on the NCSC’s database

The NCSC (National Cyber Security Centre) is a specialised agency that protects computer systems and networks of federal government agencies, including the Department of Defence.

How long until you have to renew your Cyber Essentials certification?

The certification you acquire, be it the Cyber Essentials or the Cyber Essentials Plus, will be valid for a total of 12 months. This means that for your certification to be valid, you are required to renew it annually.

IASME will email you a month before the certification expires so that you have enough time to renew it.

What happens if you do not certify?

If you do not certify in the Cyber Essentials Certification, your organisation may be held liable for any data breaches that may occur. Data breaches can be costly. Therefore, it is important that organisations use certifications like this to train their employees efficiently.

You are also at risk of having your organisation suffer negative publicity or even being shut down by the government (in extreme cases) if a breach has occurred and has been unattended to. You are also not able to access the training materials or other materials that are part of the certification process.

Ready to get certified?

Now that you have learnt about what being Cyber Essentials certified means, you are able to get started with certification and gain one of the most important certifications in the cybercecurity space. If you are interested in learning about other information security certifications, such as ISO 27001, reach out to us for a free consultation.