Are you ready for Cyber Essentials?

A free 2-minute self-assessment against the five controls under the 2026 v3.3 update. Get an instant readiness score and a personalised gap report — no obligation.

For each statement, choose how true it is for your organisation today. There are 12 questions across the five Cyber Essentials controls. Your answers stay in your browser until you choose to get the report.

1. Firewalls & Internet Gateways

Every internet-connected device — including staff laptops used at home — is protected by a correctly configured firewall.

Default administrator passwords on your routers and firewalls have been changed to strong, unique ones.

2. Secure Configuration

Unnecessary software and unused user accounts have been removed or disabled across your devices.

Your cloud platform (Microsoft 365 or Google Workspace) is securely configured — insecure legacy defaults are turned off.

3. User Access Control

Every person has their own named account — there are no shared logins.

Multi-factor authentication (MFA) is switched on for all cloud services and administrator accounts.

Administrator accounts are used only for admin tasks, separate from everyday work accounts.

4. Malware Protection

All devices run up-to-date anti-malware or EDR with real-time scanning and automatic updates.

You control which applications can be installed (allow-listing) or otherwise restrict unapproved software.

5. Security Update Management

Critical and high-severity security updates are applied within 14 days of release.

All operating systems and software in use are still supported by the vendor — nothing is end-of-life.

Automatic updates are enabled wherever possible.

0 of 12 answered
Replies the same business day

Want the fast route to certification?

We take London firms from this readiness check through to a Cyber Essentials or CE Plus certificate, handling the technical work alongside you.

See how Cyber Essentials works Browse services
  • No callout fees
  • No-obligation assessment