For UK businesses asked for Cyber Essentials Plus

Cyber Essentials Plus, explained in two minutes.

Plus is the independently audited version of Cyber Essentials. Here's what the audit checks, what it costs and how to get it done before your deadline.

Find a certification body that does PlusRead the full guide

Part of Cyber Essentials Compare, an independent guide. Not affiliated with the NCSC or IASME.

Plus in four facts

  1. Same five controls as basic Cyber Essentials, but independently tested.
  2. You need basic first. The Plus audit must be done within 3 months of it.
  3. The audit: an external scan, tests on a sample of your devices, and checks on malware protection and multi-factor login.
  4. Typical cost for a small business: around £1,500–£3,000 + VAT.

Where to go next

Plus guide

What the audit checks, the three-month rule, the 2026 changes and how to prepare.

 Free checker

Not sure you need Plus, or even basic Cyber Essentials? Find out in 60 seconds.

 75% funding

Getting your first basic certificate? Eligible businesses pay from £80 + VAT.

Need Plus by a deadline?

Tell us about your business and we'll introduce you to up to three accredited certification bodies that carry out Plus audits. It's free and there's no obligation.

Get matched on Cyber Essentials Compare