Cyber Essentials
Plus.
Cyber Essentials Plus is the next step up from the basic Cyber Essentials security standard and helps protect against up to 80% of common cyberattacks. Achieve the highest level of the scheme with our expert, remote auditing.
What is tested during the CE+ Audit?
Cyber Essentials Plus involves an independent audit of your systems to verify that your business is meeting all the important security controls you identified during the Basic self-assessment questionnaire. Testing is completed 100% remotely, whether your staff are office-based or fully remote.
Vulnerability Analysis
- Internal Vulnerability Analysis (Agent-Based) is conducted on End User Devices and Servers of all types.
- External Vulnerability Analysis and Enumeration targets the external IP addresses of your office locations.
- Cloud Service Testing is performed to confirm that at least a user and admin of every in-scope cloud service has MFA enabled.
- Mobile Device Testing verifies compliance, often confirming whether an MDM/MAM solution is in place for larger fleets.
Interactive User Testing
- Assessor tools securely connect to test your user's day-to-day account (special admin accounts created for the test are not permitted).
- Browser Checks ensure browsers are configured to prevent the download and auto-running of executable content.
- Email Checks verify that your email platform successfully blocks malicious test virus files without user execution.
- Account Separation Testing verifies the day-to-day account being used is a standard user, not an administrative account.
Important Deadline: The requirement for Cyber Essentials Plus is that you complete the journey from basic to plus within 90 days. If you are more than 90 days past your verified self-assessment, you will have to purchase a new VSA to proceed.
Select your CE+ Package.
Cyber Essentials Plus Certification
- Pass or fail result upon audit completion.
- One free re-attempt (if taken within one month).
- Vulnerability scan of infrastructure.
- Personal account manager for support.
- £25k cyber insurance (subject to eligibility).
- Official badge for website and collateral.
Cyber Essentials Plus with Assured Pass
- Includes all features from the Standard Certification package.
- Unlimited vulnerability scans prior to final audit.
- Detailed technical remediation instructions.
- Full reports provided for IT team and board.
- Full refund if the first scan shows you're already compliant with CE+.
IASME & Certification - Practical guidance for a more secure business
Small Business Compliance: GDPR & Cyber Essentials
How SMEs can navigate UK Cyber Essentials, Cyber Essentials Plus, and IASME Cyber Assurance standards smoothly with certified assessor guidance.
Read full briefing →
A Beginner’s Guide to Security Awareness & Verification
Building strong human defences and technical controls required to satisfy government and defence supply chain certification audits.
Read full briefing →
GDPR Compliance for SMEs: A Practical 90-Day Roadmap
A step-by-step 90-day framework to build audit-ready GDPR compliance, data mapping, and evidence controls without operational overhead.
Read full briefing →
Why Modern Businesses Need Continuous Cyber Protection
One-off assessments are no longer enough. Here is why continuous cyber protection has become the baseline for organisations serious about security.
Read full briefing →Ready to secure your Cyber Essentials Plus certification?
Talk to our official IASME assessors about scheduling your independent audit, running pre-assessments, or navigating the 90-day window.
Contact an Assessor → info@worldcomputing.co.uk