“Our assessor from Fig Group was super responsive (minutes, not hours or days as we've experienced previously when certifying) - this made the whole process much more efficient and fluid. Thank you. Recommended.”
Nick Way
Fig Group
The UK's fastest path to Cyber Essentials and cyber resilience.
Cyber Essentials certification in 6 working hours. Compliance, risk and evidence on one governance-first platform. Eligible certificate holders may separately receive a cyber-liability benefit arranged by IASME and its insurance partner; Fig does not provide or arrange it.
Choose your route
What do you need from Fig Group?
Cyber Essentials
Get Cyber Essentials, fast.
Buy Cyber Essentials direct. Pricing is public, scope is explained before checkout, and compliant submissions are covered by a 6-hour turnaround guarantee.
Defence Cyber Certification
Defence supply-chain cyber certification.
IASME-licensed DCC assessments at Level 0 and Level 1 for UK MOD suppliers under tender pressure. Three-year certificate validity and annual attestation support.
Compliance platform
Run compliance and risk as one connected workflow.
The platform is for teams that need ongoing visibility: controls, evidence, suppliers, incidents, policies, remediation and reporting all connected to the same operating model.
Resources
Useful next reads.
Practical guides covering Cyber Essentials certification, scheme requirements, sector guidance, and how Fig handles the parts most assessors get wrong.
What Is Fig Security?
Who Fig Security is, what it does, and how it helps UK organisations get certified, stay compliant, and prove it.
Read the guideCyber Essentials vs Cyber Essentials Plus: Cost Comparison (2026)
Compare published prices by organisation size, why Plus costs more, total cost of ownership, and how to choose.
Read the guideEnd-to-End Risk Management for the Cyber Security and Resilience Bill
What the Bill means for critical national infrastructure operators, NCSC CAF evidence, 24-hour reporting, and supply-chain risk.
Read the guideFAQ
Common questions before choosing a route.
These answers separate the group, platform and certification services so customers understand who they are buying from and where to go next.
Do I need the platform to buy Cyber Essentials certification?
No. Certification can be bought as a standalone service from Fig Compliance Ltd. The platform is useful if you also want to manage controls, evidence, risk and recurring compliance work over time.
Can the platform and certification services be used together?
Yes. Many customers use the platform to organise evidence and remediation work, then use Fig Compliance Ltd for certification. They are complementary services, but each can be bought separately.
Is Fig Compliance Ltd IASME licensed?
Yes. Fig Compliance Ltd is the certification operating entity for IASME-licensed Cyber Essentials services. The homepage keeps the group structure visible so customers know which entity provides which service.
Where should MSPs start?
MSPs should start with the MSP page if they want to deliver compliance services across client portfolios. If they only need their own Cyber Essentials certificate, they can start with the Cyber Essentials page.
Contact
Speak to the right Fig team.
Tell us whether you need certification, the platform, or an MSP delivery model. We will route the enquiry to the right operating team.
- Cyber Essentials and CE Plus enquiries
- Platform walkthroughs for MSPs and corporate teams
- Response within one working day