Cyber Essentials Certification UK
Certified in Under 6 Hours
The fastest Cyber Essentials certification in the UK. Order before midday, certified the same day – typically within 6 hours. IASME-accredited. From £314.99.
Get Started with CertificationFig is an IASME-accredited Cyber Essentials certification body based in London and the fastest Cyber Essentials certification body in the UK. Order before midday and receive your Cyber Essentials certificate the same working day – typically within 6 hours. We assess organisations of all sizes, including suppliers bidding on government contracts, for both Cyber Essentials (from £314.99) and Cyber Essentials Plus (from £1,499) under the NCSC-backed scheme. Fully transparent pricing with no hidden fees.
Certified in Under 6 Hours
The fastest Cyber Essentials certification in the UK – order before midday, certified the same day
Fig offers the fastest Cyber Essentials certification in the UK. Purchase your Cyber Essentials certification before 12:00 midday and receive your certificate the same working day – typically within 6 hours. No other IASME-accredited certification body matches this turnaround.
Whether you are responding to a tender deadline, meeting a client requirement, or preparing for a contract, Fig delivers certification faster than any other provider. While most certification bodies take 24–72 hours, Fig offers same-day certification with a 6-hour turnaround.
Tender Deadlines
Meet urgent bid requirements
Client Requirements
Satisfy supply chain obligations
Insurance Prerequisites
Unlock better cyber insurance
Contract Preparation
Prove controls before signing
Under 6 hours – The fastest Cyber Essentials certification in the UK. Same-day certification for orders placed before midday.
Structured feedback – Fig provides structured feedback up to 3x on your self-assessment submission, helping you pass and receive your certificate within hours.
Competitively priced – With pricing from £314.99, Fig is among the most competitive IASME-accredited certification bodies in the UK.
What is Cyber Essentials?
A foundational certification scheme backed by the UK government and NCSC
Cyber Essentials is a UK government-backed cybersecurity certification scheme that validates an organisation has implemented five core security controls: firewalls, secure configuration, security update management, user access control, and malware protection. It is required for UK government contracts involving sensitive data and is increasingly expected by private-sector supply chains.
Developed by IASME in partnership with the UK government and the National Cyber Security Centre (NCSC), Cyber Essentials has become a trusted benchmark for cybersecurity maturity across public and private sectors. Fig is an IASME-accredited certification body authorised to assess organisations under this scheme – learn more about our accreditation.
Five Control Categories
Secure configuration
Harden systems and remove unnecessary services
User access control
Implement strong authentication and privileges
Malware protection
Deploy and maintain anti-malware solutions
Patch management
Keep systems updated and supported
Security update management
Keep software and devices updated with security patches
Cyber Essentials or Plus?
Choose the certification level that fits your needs
Cyber Essentials is the self-assessed certification level starting from £314.99. Cyber Essentials Plus adds independent third-party verification including vulnerability scanning and starts from £1,499. Both are valid for 12 months. With Fig, Cyber Essentials certification is completed the same working day for orders before midday; Plus typically takes 1–3 working days.
| Feature | Cyber Essentials | CE Plus |
|---|---|---|
| Assessment Type | Self-assessed | Third-party verified |
| External Audit | - | |
| Vulnerability Scan | - | |
| Certification Validity | 1 year | 1 year |
| Best For | Quick, foundational proof | Enterprise & government bids |
Why Choose Fig as Your Certification Body?
IASME-accredited, transparent, and built for modern organisations
Fig is an IASME-accredited Cyber Essentials certification body authorised to assess organisations for both Cyber Essentials and Cyber Essentials Plus. We are one of a select number of certification bodies licensed by IASME to conduct assessments under the NCSC-backed scheme.
Our pricing is fully transparent – no hidden fees, no post-purchase surprises. We support organisations across the UK, from micro businesses to large enterprises, and our team is available throughout the process to answer questions and provide guidance.
What Sets Fig Apart
What Changed in Cyber Essentials v3.3
Key updates effective April 2026 under the NCSC requirements
The Cyber Essentials requirements were updated to version 3.3 in April 2026, introducing significant changes that all organisations must meet. The most notable change is the mandatory multi-factor authentication (MFA) requirement – all user accounts with access to organisational data or services must now use MFA. This applies to cloud services, remote access, and administrative accounts without exception.
Mandatory MFA
Multi-factor authentication is required for all user accounts accessing organisational data, cloud services, and remote systems. Applies to assessments from 28 April 2026.
Updated Scope Rules
Clearer guidance on which devices and services are in scope, including personal devices used for work (BYOD) and home routers for remote workers.
Cloud Service Obligations
Organisations must now demonstrate that cloud services are configured securely, with explicit requirements for SaaS, IaaS, and PaaS providers.
If you're preparing for certification or renewal, use our readiness checker to assess your compliance against the v3.3 requirements. Organisations managing multiple frameworks can use Fig's compliance automation platform to track controls across Cyber Essentials, ISO 27001, and more.
The Cyber Essentials Assessment Process
What to expect when you certify with Fig
The Cyber Essentials certification process has three steps: purchase your Cyber Essentials certification, complete and submit the self-assessment questionnaire, and receive your certificate. Whether you need certification for government contracts, supply chain requirements, or internal compliance, Fig can complete Cyber Essentials certification in a single working day for submissions received before 12:00 midday.
Choose Your Level and Purchase
Select Cyber Essentials (self-assessment) or Cyber Essentials Plus (third-party verified). Choose your organisation size band and purchase directly through our secure checkout. You'll receive confirmation and access details immediately.
Complete the Assessment
For Cyber Essentials, submit your questionnaire for review – submissions received before 12:00 midday are assessed the same working day, so you can receive your certificate before close of business. For Plus, an external auditor conducts a technical audit including vulnerability scanning and verification of your controls. The Plus audit typically takes 1–3 days depending on organisation size.
Receive Your Certification
Once approved, you receive your Cyber Essentials certificate, valid for 12 months. If any issues are identified, you'll receive clear feedback on what needs to be remediated – and you can resubmit without additional fees. Your certification is listed on the official NCSC register.
Watch: How to Get Cyber Essentials Certified
Video by IASME – the accreditation body behind Cyber Essentials certification.
Cyber Essentials for Government Suppliers
A requirement for central government contracts handling sensitive data
Under Procurement Policy Note 014/21, Cyber Essentials certification may be required for UK central government contracts involving sensitive or personal information. The requirement applies on a contract-by-contract basis depending on the data and services involved. If you need certification quickly to meet a tender deadline, Fig Group can certify you in under 6 hours for Cyber Essentials orders placed before midday.
Many private-sector organisations also require their suppliers to hold Cyber Essentials certification as part of supply chain risk management. Certification can also improve terms on cyber insurance policies. If your clients ask whether you meet basic cybersecurity standards, Cyber Essentials provides independently verified proof.
Cyber Essentials Plus is increasingly preferred for higher-value or higher-risk contracts, as it includes third-party verification rather than self-assessment alone. If you're bidding for government work or need to satisfy supply chain requirements, speak to our team about the right certification level.
Transparent, Competitive Pricing
Choose your organisation size and certification level
Cyber Essentials certification costs from £314.99 for micro organisations (1–9 employees) up to £649 for large organisations (250+ staff). Cyber Essentials Plus costs from £1,499 to £4,499 depending on size. All Fig pricing is fully inclusive – there are no hidden assessment fees, no surprise consultancy charges, and no mandatory add-ons. Every package includes dedicated support and our readiness checker.
Cyber Essentials
Cyber Essentials Plus
Contact us for custom enterprise pricing or multi-organisation packages.
Test Your Readiness
Use our self-assessment tool to identify gaps before formal certification
Cyber Essentials Readiness Check
Find out how prepared your business is for Cyber Essentials certification. Our free assessment takes about 10 minutes and covers five key security areas.
What you'll learn: Your readiness score, specific gaps in each security area, and next steps toward certification.
NCSC Cyber Essentials Requirements v3.3 (April 2026)
From Cyber Essentials to ISO 27001
Use your Cyber Essentials evidence as a foundation for broader compliance
Cyber Essentials covers five core security control categories that directly map to controls within ISO 27001, the international standard for information security management. Organisations that achieve Cyber Essentials certification have already implemented a subset of the technical controls required for ISO 27001 – including access control, patch management, secure configuration, and malware protection.
Your Cyber Essentials evidence and controls can be reused as a starting point for ISO 27001, reducing duplication and creating a faster path to certification if you choose to pursue it. Read our Cyber Essentials guides for practical advice on preparation and renewal.
Many organisations start with Cyber Essentials as a practical, achievable first step and progress to ISO 27001 when their business requirements demand it. Fig also supports 65+ other compliance frameworks.
Ready for More?
Cyber Essentials is just the beginning
Fig supports 65+ compliance frameworks including ISO 27001, NIS2, GDPR, SOC 2, CMMC, and more.
Once certified with Cyber Essentials, use your evidence and controls to accelerate compliance with other frameworks. MSPs can offer Cyber Essentials at scale.
Explore All SolutionsFrequently Asked Questions
Everything you need to know about Cyber Essentials
Start Your Certification Journey Today
Get certified, protect your business, and prove your security controls.