As a licensed certification body, we’ll help you achieve Cyber Essentials and Cyber Essentials Plus certifications
Minimise risk with Cyber Essentials
The Cyber Essentials scheme, developed by the National Cyber Security Centre (NCSC), offers an affordable and effective level of cyber assurance for organisations of all sizes. Certification is available at two levels: Cyber Essentials and Cyber Essentials Plus.
The scheme is built around five key technical controls that help organisations protect themselves against common cyber threats and establish strong cyber security foundations. By implementing these controls, businesses can improve their security posture, strengthen resilience and demonstrate a commitment to protecting systems, data and users.
Important notice: Cyber Essentials requirements are updated annually by IASME and the NCSC to reflect evolving cyber threats, including enhanced controls around cloud services and user access.
We’re trusted by
IT & cyber security experts
All our assessors are fully qualified and have deep expertise across IT and information security.
Quick & efficient certification
We’ve developed a unique, 5-step process to ensure your certification goes as smoothly as possible right from the start.
Reliable cyber security partner
We offer comprehensive cybersecurity solutions. Our experts know how to help you stay protected and meet the standard.
100% success rate
We’ll work with you throughout the process to ensure your certification is a success.
Cyber Essentials
Cyber Essentials is a questionnaire-based assessment that confirms your organisation meets the UK’s recognised baseline standards of cybersecurity.
As a licensed certification body, we not only guide you through the questionnaire but also conduct a gap analysis of your systems. This helps identify the steps to be taken to get your business ready for certification.
- Questionnaire-based assessment
- Cybersecurity gap analysis
We’ll complete the documentation with you and issue your certification directly, giving you complete peace of mind.
Cyber Essentials Plus
Cyber Essentials Plus builds on the standard certification by adding a remote or onsite assessment. As part of the process, we perform both internal and external vulnerability scans and test a sample of user devices and network equipment.
- Remote or Onsite assessment
- Internal & external vulnerability scans
These tests confirm that your defences are working effectively against real-world attacks. Once everything checks out, we’ll finalise and issue your certification.
Please note: Cyber Essentials Plus must be completed at the same time as, or within 3 months of, the standard certification.
Mark McKeever
Director of Carousel Marketing
"Peace of mind is the biggest benefit that Air has delivered to the business, with systems updating automatically, a responsive service and excellent communication. With the technological advances in recent years, we have more and more of our core systems based online. Due to the nature of some of the work we do, and the data we hold on behalf of, our clients, IT security is a top priority and Air has advised on an array of protocols. We’re now in the process of Cyber Essentials and they have been really insightful and informative – they’re helping us every step of the way."
Case Study
Carousel Marketing
Air IT Group provides Carousel Marketing with managed IT, strong security, and compliance guidance, enabling the team to focus on delivering results for clients.
Essential Reads
View all news
Frequently asked questions
Cyber Essentials is a UK government-backed certification that helps organisations protect against common cyber threats. It demonstrates that your business has taken essential steps to secure networks, devices, and data. Many public sector contracts require Cyber Essentials, and it reassures customers and partners that security is taken seriously.
Cyber Essentials: A self-assessment questionnaire reviewed by a certification body, like us. It covers five key security controls: firewalls, secure configuration, access control, malware protection, and patch management.
Cyber Essentials Plus: Includes all the above but adds an independent technical audit and testing. This provides stronger assurance to clients, regulators, and stakeholders.
Cyber Essentials is highly recommended for all UK businesses, but it’s mandatory for organisations bidding on certain central government and Ministry of Defence contracts. The certification provides credibility, reduces cyber risk, and protects your business.
Most organisations can complete Cyber Essentials in a few days to a couple of weeks, depending on the complexity of their IT environment and readiness. Cyber Essentials Plus usually takes longer because it involves independent testing. At Air IT Group, we can offer a cybersecurity gap analysis to identify the steps needed to get your business ready for certification.
- Protection against 80% of common cyber attacks
- Compliance with UK government requirements
- Competitive advantage when tendering for contracts
- Lower cyber insurance premiums with some insurers
- Trust and reassurance for customers, partners, and stakeholders
We’re on hand to answer your questions
Can’t find the answer you’re looking for?
From an expert’s perspective