Danzell v3.3 drops 27 April — MFA now mandatory for ALL users. Last year's pass may not work this year. Check if you're ready →

Get Cyber Essentials Certified in 4 Weeks

97% of UK businesses can't bid on public sector tenders. Nerdster gets you certified with a 98% first-time pass rate — plus £25,000 free cyber insurance.

IASME Certified 98% First-Time Pass Rate 4-Week Certification NCSC-Backed Scheme

The Cost of Inaction

What You're Losing Without Cyber Essentials

Every month without Cyber Essentials certification costs you contracts, increases your insurance premiums, and leaves you exposed to avoidable breaches.

📄

43%

Lost Contracts

of businesses lose tenders without Cyber Essentials. PPN 014 mandates it for all government contracts involving sensitive data.

💷

10-15%

Higher Insurance

more in cyber insurance premiums for non-certified firms. You're overpaying for cover that a £300 certification could reduce.

🛡️

92%

Breach Exposure

more likely to make an insurance claim without Cyber Essentials controls in place — verified by the NCSC.

Deadline Alert

April 2026: The Rules Just Got Harder

The Danzell v3.3 update takes effect 27 April 2026. If you passed Cyber Essentials last year, you may fail this year under the new rules.

MFA Mandatory for ALL Users

Under Cyber Essentials v3.3, if a system offers multi-factor authentication, it must now be enabled for every user — not just admins. Cost and convenience are no longer valid excuses.

Cloud Services In Scope

SaaS, multi-tenant platforms, and cloud infrastructure must now be explicitly included in your Cyber Essentials assessment scope. No more excluding Microsoft 365.

Stricter Scope Declarations

You must explicitly list every excluded system and legal entity. Assessors are checking more rigorously. Ambiguity means failure.

Our Process

Cyber Essentials Certified in 4 Weeks. Here's How.

A clear, proven path from Cyber Essentials assessment to certification — with Nerdster handling the technical work.

1

Week 0

Free Assessment

We audit your current setup against all 5 Cyber Essentials controls — firewalls, secure config, access control, malware protection, and patching.

2

Weeks 1-2

Gap Remediation

We implement everything needed for Cyber Essentials compliance: MFA across all systems, EDR deployment, cloud configuration, patch management, and user access controls.

3

Weeks 3-4

Certification

We guide you through the IASME assessment, run pre-assessment vulnerability scans, and coordinate with the certification body. 98% first-time pass rate.

4

Ongoing

Insurance + Contracts

£25,000 free cyber liability insurance activates with your Cyber Essentials certificate. You're now eligible for government tenders and enterprise supply chains.

Insurance & ROI

Your Certification Pays for Itself

Cyber Essentials certification doesn't just protect you — it saves you money through <a href='/compliance/cyber-insurance/' class='text-primary hover:underline'>cyber insurance</a> benefits and contract eligibility.

Insurance Benefits

  • £25,000 Free Cyber Insurance

    AIG-underwritten cyber liability cover included with every CE certification for firms under £20M turnover.

  • 10-15% Premium Reduction

    UK insurers offer lower premiums for CE-certified businesses. Nerdster clients typically achieve 15-25% reductions.

  • 92% Fewer Claims

    NCSC data shows CE-certified businesses are 92% less likely to make a cyber insurance claim.

The Numbers Speak

CE Certification Cost £300-500
Average Breach Cost £3,500+
Free Insurance Value £25,000
Annual Premium Savings £150-300
Break-even Immediate

98%

First-time pass rate

4 weeks

Average certification time

92%

Fewer insurance claims

£25,000

Free cyber insurance

What's Included

Everything You Need for Cyber Essentials Plus

Nerdster's Business tier at £86/user/month includes every control required for Cyber Essentials Plus certification — no hidden costs, no extra consultancy fees. Our managed IT support covers implementation and ongoing compliance.

MFA deployment across all systems
Endpoint Detection & Response (EDR)
Automated patch management (14-day cadence)
Cloud security configuration
Security awareness training
CE Plus assessment coordination
Quarterly business reviews
Firewall & gateway management

Comparison

CE Basic vs. CE Plus — Which Do You Need?

Not sure which level is right? Here's the difference.

Feature

Cyber Essentials

£300-500

Recommended

Cyber Essentials Plus

£1,500-3,000

Self-assessment questionnaire
Covers 5 core controls
Government contract eligibility
£25,000 free cyber insurance
Independent technical audit
Vulnerability scanning
Phishing simulation testing
Required for MOD & NHS contracts
Higher insurer credibility
Best for Quick government contract eligibility Sensitive data & regulated supply chains

Not sure which you need? We'll tell you in your free assessment.

FAQ

Cyber Essentials: Your Questions Answered

What is Cyber Essentials?

Cyber Essentials is a UK Government-backed certification scheme that helps businesses protect against the most common cyber threats. It covers five technical controls: firewalls, secure configuration, user access control, malware protection, and patch management. It's operated by IASME and backed by the NCSC. Learn more on our <a href="/compliance/cyber-essentials/">Cyber Essentials compliance page</a>.

What's the difference between Cyber Essentials and Cyber Essentials Plus?

Cyber Essentials (Basic) is a self-assessment questionnaire costing £300-500. Cyber Essentials Plus adds an independent technical audit — including vulnerability scanning, phishing simulation, and configuration review. Plus is more rigorous and is required for MOD supply chain contracts and NHS suppliers. We recommend Plus for any business handling sensitive data.

How long does certification take?

With Nerdster, most businesses achieve Cyber Essentials certification in 4 weeks. This includes our initial assessment (week 0), remediation of any gaps (weeks 1-2), and the formal IASME assessment (weeks 3-4). Our 98% first-time pass rate means you're unlikely to need a resubmission.

How much does it cost?

The IASME certification fee is £300-500 for Cyber Essentials Basic (depending on company size). Cyber Essentials Plus assessments typically cost £1,500-3,000. Nerdster's Business tier at £86/user/month includes all the controls and support needed for CE Plus — MFA, EDR, patching, cloud security, and assessment coordination.

Do I need Cyber Essentials for government contracts?

Yes. Under PPN 014, Cyber Essentials is mandatory for any central government contract involving personal data, government employee data, or OFFICIAL-level information. Many NHS bodies, local authorities, and enterprise buyers now also require it from suppliers. Without it, you cannot bid on these contracts.

What about the free cyber insurance?

Every Cyber Essentials certified organisation with under £20 million turnover receives £25,000 free cyber liability insurance, underwritten by AIG and administered by Sutcliffe & Co. This covers business interruption, data recovery, and third-party liability. Higher coverage tiers (£100,000 or £250,000) are available at additional cost. See our <a href="/compliance/cyber-insurance/">cyber insurance guide</a> for more details.

Stop Losing Contracts. Get Certified.

Your competitors are already certified. 56,000 UK organisations hold Cyber Essentials — and it's growing 20% per year. Don't get left behind.