Primelo Cyber is an IASME-authorised Certification Body that assesses and issues Cyber Essentials directly. We also provide remediation and readiness support for the separate Cyber Essentials Plus technical assessment.
Both certifications assess the same five technical control areas. The difference is how those controls are verified: Cyber Essentials uses a verified self-assessment, while Cyber Essentials Plus adds an independent technical assessment of the organisation’s environment.
A clear baseline for protecting your organisation against common internet-based attacks and demonstrating that core cyber hygiene controls are in place.
Higher assurance through independent technical testing that verifies the Cyber Essentials controls are implemented and operating effectively across the agreed scope.
Our readiness work focuses on practical implementation. We help your team understand what is in scope, identify where current controls fall short, and make the changes required to support accurate answers and a successful technical assessment.
Review internet gateways, host firewalls, cloud security rules, exposed services, and administrative access so only necessary and authorised traffic is permitted.
Remove or disable unnecessary accounts, software, services, and insecure defaults across devices, operating systems, applications, and cloud platforms.
Apply least privilege, control administrative accounts, strengthen authentication, and ensure access is approved, reviewed, and removed when no longer needed.
Confirm appropriate malware defences, application controls, platform protections, and user restrictions are deployed across in-scope devices and services.
Establish supported software inventories and reliable patching processes so critical and high-risk vulnerabilities are addressed within required timescales.
As an IASME-authorised Certification Body, Primelo Cyber assesses and issues Cyber Essentials directly. We also work alongside technical and operational teams to remediate gaps and prepare for the separate Cyber Essentials Plus technical assessment.
Define the organisation, devices, networks, cloud services, and users in scope, then assess current controls against the certification requirements.
Prioritised technical guidance to resolve configuration, access, software support, patching, firewall, endpoint, and cloud-control gaps.
We review the Cyber Essentials submission as your IASME-authorised Certification Body and issue the certificate directly when the requirements are met.
Prepare for Cyber Essentials Plus with technical checks that mirror likely assessment focus areas and identify weaknesses before the independent assessor does.
The programme is sized around your environment and target certification. Each stage produces clear actions and evidence so there is no ambiguity about what is ready, what remains outstanding, and who owns the next step.
Confirm the target level, business drivers, certification deadline, technical scope, and key control owners.
Review the five control areas and document gaps against the requirements for Cyber Essentials or Plus.
Implement the priority changes with practical support for internal teams and technology partners.
Recheck controls, answers, evidence, and technical readiness before independent certification activity.
Organisations seeking broader governance and risk assurance can continue from Cyber Essentials into our Cyber Assurance certification service. Where customers or compliance programmes require technical validation of specific systems, our penetration testing service delivered by CREST and OSCP certified testers can provide deeper security testing.
Start Your Readiness Assessment