Everything in Cyber Essentials, then an independent hands-on technical audit of your devices. The same senior testers who attack-test systems for a living pre-validate it first - a full CE+ dry run, tracked in your live evidence portal - so there are no surprises on assessment day.
Where Cyber Essentials is self-assessed, Cyber Essentials Plus adds an independent technical audit: an assessor checks a sample of your devices to confirm the five controls genuinely work. It is the stronger mark of assurance, and increasingly required in supply chains and tenders. From £999 excl. VAT depending on your size.
The formal CE+ audit and certificate are handled by an IASME-appointed Certification Body. Because our senior team gets you ready and pre-checks every device first, the audit holds no surprises.
A credentialed scan of a sampled set of your devices, the way the assessor will run it.
Confirming high-risk updates are applied within the scheme timeframes, against the test specification.
Checking anti-malware and the controls that stop malicious files and sites reaching users.
Verifying least privilege, admin separation and hardened builds on the sample.
Testing the everyday software that attackers most often target.
Our senior testers run the CE+ checks on your sampled devices exactly as the assessor will - a dry run that surfaces failures while there is still time to fix them, not on the day. You go into the real audit knowing you will pass.
Define the estate in scope and establish where you stand today.
Test against the five controls and the CE+ spec; document every gap.
Fix the gaps with hands-on guidance, not just a report to action.
A full CE+ dry run on sampled devices to confirm you are ready.
Your certificate is assessed and issued by an IASME-appointed Certification Body.
CE+ can feel like a scramble for evidence. With the Forefront AETOS portal it isn’t - your sample list, evidence folders and guidance sit in one secure place, and we see everything you add, with your name and the time.
A quick walkthrough of the CE+ assessment - what happens on the day and what to have ready, so there are no surprises.
Tell us your organisation size and estate, and we’ll scope the pre-validation and send an exact quote.