Cyber Essentials
UK government-backed scheme covering five key security controls to protect against common cyber threats.
About Cyber Essentials
UK government-backed scheme covering five key security controls to protect against common cyber threats. This framework is part of tier 1 - cyber & data, designed for SMEs starting their compliance journey.
Authoritative current reference
Cyber Essentials Requirements for IT Infrastructure v3.3 (effective 27 April 2026)
Authority: UK National Cyber Security Centre (NCSC)
Current NCSC technical requirements are v3.3, effective 27 April 2026. R2 mapping should be reviewed against v3.3 before R3 release.
Estimated Time
Approximately 30 minutes to complete the full assessment
Self-Service Assessment
Complete guided assessments using governed, versioned question sets and recorded responses.
Automated Gap Analysis
Identify assessment gaps with severity ratings and prioritised remediation recommendations.
Evidence Vault
Securely store and organise compliance documentation, including evidence dates and expiry metadata where provided.
Expert Support
Access to TASK consultants for guidance, reviews, and remediation planning.
Assessment Reports
Generate governed PDF assessment reports for stakeholders where the selected plan and assessment state permit reporting.
Need enterprise deployment? Contact us
Other Frameworks in Tier 1
ISO/IEC 27001:2022 + Amd 1:2024
International standard for information security management systems (ISMS) with comprehensive risk-based controls.
UK GDPR
UK General Data Protection Regulation — data protection and privacy requirements for organisations handling personal data.
NIS2 Directive
EU Network and Information Security Directive — cybersecurity obligations for essential and important entities.