MC4

Home  /  Cyber Essentials

Cyber Essentials

Cyber Essentials, without the stress.

Cyber Essentials is the UK Government-backed standard for good cyber security practice. We get you ready, an independent assessor checks the work, and we stay with you until you pass.

See Guardian plans

What it covers

Five controls that stop most attacks.

  • Secure configuration of computers, devices and cloud services
  • User access control: the right people have the right access
  • Malware protection on every device
  • Security update management: software kept up to date
  • Firewalls: securing the boundary between your network and the internet

How we get you certified

An assured pass, done properly.

We don’t mark our own homework. Your assessment is carried out by an independent certification body we partner with.

  1. Review

    We check your setup against the requirements and list the gaps.

  2. Fix

    We close the gaps with you, using Guardian where it already covers the control.

  3. Assess

    We submit only when you’re ready. The independent assessor reviews your answers.

  4. Resolve

    If the assessor raises anything, we fix it with you and resubmit until you pass.

  5. Stay certified

    Certification is renewed every year. Guardian keeps the controls in place between renewals.

Why it’s worth it

More than a certificate.

Win and keep work

Jersey government suppliers on contracts over £25,000 must show Cyber Essentials or equivalent, and UK central government requires it for higher-risk contracts. Many clients ask for it too.

Included cyber insurance

Eligible organisations with turnover under £20m, including those in the Crown Dependencies, can opt in to £25,000 of cyber liability cover when their whole organisation is certified.

Fewer claims

The NCSC reports that organisations with Cyber Essentials are 92% less likely to make a claim on their cyber insurance.

Stricter since April 2026. Under the current requirements, not using multi-factor authentication on cloud services where it’s available, and not installing high-risk or critical updates within 14 days, are automatic fails. These are the first things we check.

Sources: Government of Jersey; PPN 014; IASME insurance; NCSC Annual Review 2025; IASME, April 2026 changes.

Cyber Essentials Plus

Ready for the hands-on audit.

Cyber Essentials Plus adds a technical audit of your systems by the assessor. We prepare your devices and accounts beforehand and support you through the audit, so there are no surprises on the day.

Need Cyber Essentials for a client, contract or insurer?

Book a short call and we’ll tell you how ready you are and what it will take.

Contact us