Cyber Essentials for UK MSPs and MSSPs Certified by Fig.
Deliver Cyber Essentials and Cyber Essentials Plus to your clients with Fig as your certification partner. Your MSP retains the customer relationship and manages preparation and remediation; Fig performs the certification assessment. Certification starts at £299.99 + VAT per end-client organisation, with partner pricing available on request.
Sector-specific
Tailored to managed service providers (msps)
The standard scheme guidance does not address the operational reality of this sector. These are the scope, regulatory, and supplier-cascade points Fig assessors check first.
- 01Multi-tenant architecture to manage client portfolios.
- 02Partner-led client service, with certification issued by the licensed certification body.
- 03Volume pricing agreed for your client portfolio.
- 04CE and CE Plus delivery under Fig's IASME licence.
- 05Governance-first platform integration (vulnerability management, incident response).
- 06MSP-specific CE scoping (multi-tenant separation, privileged-access management).
Pricing at a glance
Below the standard IASME fee at every tier
No re-submission charges. Three free re-submissions included. Published pricing - no gated forms or consultancy add-ons.
Turnaround
6 hours
For compliant submissions before midday.
Cyber Essentials
£299.99 - £549.99
+ VAT, by organisation size.
Cyber Essentials Plus
£1,499.99 - £4,499.99
+ VAT, third-party verified.
Common questions
Frequently asked questions
Can our MSP resell Cyber Essentials?
Yes. You retain the client relationship and can complete the self-assessment on the client's behalf. The client reviews and authorises the submission and provides the required portal sign-off. Fig performs the assessment and issues certification when the requirements are met. Your MSP's own certificate does not certify its clients.
What MSP volume discount is available?
MSPs certifying 10+ clients per year get volume pricing. The list price of £299.99 (Micro) - £549.99 (Large) applies per end-client certification; MSP margin is on top. Request MSP pricing via /contact.
Who owns preparation and assessment?
Agree preparation, remediation and evidence responsibilities with each client. Your engineers can help document the controls; the client remains responsible for the accuracy and approval of its submission. Fig carries out the independent certification assessment.
How should we price our client service?
Agree partner certification fees with Fig, then price your preparation, remediation and ongoing support separately or as a clearly defined package. Margin depends on your scope and delivery costs; we do not promise a standard return.
How do we manage supply-chain evidence?
Keep a separate organisation scope, certificate, expiry date and responsibility record for each customer. Check the required certification level and scope with the requesting buyer. Use the Fig platform to coordinate evidence and follow-up work across your portfolio.
Related routes for MSPs
Cyber Essentials, MSP delivery platform, and risk management - three different jobs.
This page is for MSPs that need their own Cyber Essentials certificate. If you want to deliver Cyber Essentials across a client portfolio, see the MSP delivery platform. If you want a multi-tenant risk and incident workflow for your clients, see MSP risk management.
Deep-dive articles
Long-form guidance for managed service providers (msps)
Technical guidance written by an IASME-licensed assessor - scope edge cases, supplier cascade, and regulatory overlap that the scheme guidance does not cover.
Next step
Ready to certify?
From £299.99 + VAT. IASME-licensed. Typically within 6 working hours. No consultancy add-ons.