A customer has requested Cyber Essentials. Before you apply, identify what your business has checked, what remains uncertain and who is responsible for the outstanding IT work.
Use our free editable Excel worksheet to turn the requirement into a practical preparation plan.
Download the free preparation worksheetNo email registration. No obligation to use CloudOps Studio. Independent preparation resource, not certification.
Which systems need to be included? Are MFA and security updates properly managed? Who can verify your devices and Microsoft 365 settings? What needs doing before the customer's requested date?
The worksheet brings the actions and owners into one place instead of leaving you with another generic cybersecurity score.
Record the requested certification level, deadline, business scope and people responsible.
Work through firewalls, secure configuration, security update management, user access control and malware protection.
Record what has been checked, what still needs technical verification and what evidence or explanation to obtain.
Assign priorities, internal owners and dates so the next steps are clear.
UK small-business owners, operations managers and supplier or tender administrators who have received a Cyber Essentials requirement from a customer or contracting authority. Not all contracts require certification; always check the buyer's actual requirement.
CloudOps Studio can discuss a clearly scoped Cyber Essentials Technical Preparation Review, including selected Microsoft 365, user-access, device and update checks. Technical work is optional and separately agreed. You can use your existing IT provider or official Cyber Advisor support instead.
No. This is an independent preparation workbook. Refer to the current IASME Danzell questionnaire and NCSC requirements v3.3 for the official scheme.
No. It is an organising tool, not an assessment or verification of controls. Only the authorised certification process can determine an outcome.
Yes, where Microsoft 365 is a business cloud service within scope. It helps you identify questions to verify, but does not connect to or inspect your tenant.
No. Backups are recommended resilience practice, and are separated from the five Cyber Essentials controls in the workbook.
Eligible SMEs may qualify for the Cyber Essentials First Step Fund's 75% discount. Selected suppliers may qualify for fully funded certification and Cyber Advisor support. Check the government's latest funding criteria and availability.
No. You can complete the workbook yourself or work with an existing provider or Cyber Advisor.
Do not enter passwords or confidential system configurations in documents you intend to distribute.