GLOSSARY / Compliance & Risk

Cyber Essentials Plus

A UK government-backed certification verifying that basic technical security controls, such as patching, access control, and malware protection, are correctly implemented and independently tested.

west Back to Glossary

Definition

verified

Cyber Essentials Plus is a UK government-backed certification scheme that verifies an organisation has implemented five fundamental technical controls: secure configuration, boundary firewalls, access control, malware protection, and patch management, and, unlike the base Cyber Essentials tier, has those controls independently tested rather than self-assessed. It's increasingly a baseline requirement for UK public sector and supply-chain contracts.