Cyber Essentials is a government backed certification scheme designed to protect organisations against common cyber attacks.
For many businesses, certification becomes urgent because a customer has requested it or a commercial opportunity depends on it.
Mintivo manages the Cyber Essentials process for you, from gap assessment through remediation and certification support. Giving you a clearer part to certification without the unnecessary complexity.
A customer request can turn cyber security from a future priority into an immediate commercial requirement. The same can happen when a tender or supplier framework asks you to demonstrate that suitable security controls are in place.
Mintivo helps you establish what is being asked of your business, what level of certification is appropriate and what needs to happen before you apply.
Has one of these moved Cyber Essentials up your priority list?
Certification
What it means
Best suited to
Cyber Essentials
Cyber Essentials Plus
If Cyber Essentials Plus is required, your business will first need Cyber Essentials certification. The Plus assessment normally needs to follow within the required certification window, so it is worth planning both stages together if you already know Plus is your end goal.
Not sure which one you need? Ask us
Applying before you understand your current IT environment can create unnecessary delays. Some problems can be addressed quickly. Others may require changes to devices, software or the way your IT is managed.
Common Cyber Essentials blockers include:
Applying before these issues are understood can create additional work at exactly the point your business may already be working towards a deadline.
A cyber readiness check gives you a clearer view of what needs attention before certification. Mintivo can then help you prioritise the changes that matter and understand how they could affect your timescale.
HOW MINTIVO SUPPORTS YOU
We review the systems and users that fall within scope. This can include your Microsoft 365 environment and the security controls applied to business devices.
The aim is to identify anything that may prevent you meeting the Cyber Essentials requirements before you apply.
If gaps are identified, Mintivo can help you understand what needs changing and which actions should take priority.
You get practical recommendations rather than being left with a list of problems to resolve by yourself.
Once the required controls are in place, we support you as you work through the Cyber Essentials certification process.
If you are progressing to Cyber Essentials Plus, we can also help you prepare your environment for the additional technical assessment.
Cyber Essentials certification needs to be renewed annually. Keeping your controls in good shape throughout the year can make renewal more straightforward and reduce the risk of another last minute compliance project.
If the readiness process identifies wider IT concerns, Mintivo can also help you address them through ongoing cyber security or managed IT support.
Mintivo combines Cyber Essentials support with wider technical expertise, so recommendations can be considered in the context of the IT environment you already have.
As a Microsoft Partner, Mintivo can also help where readiness issues relate to Microsoft 365 or the wider management of your IT estate.
Based near Chippenham, the team supports businesses across the South West as well as organisations operating nationally.
If Cyber Essentials is already on your agenda, the most useful next step is a short planning conversation.
We will talk through your current setup, likely areas of complexity, what may need attention before certification, and what a realistic route forward looks like for an organisation of your size.
Use the form to book a Cyber Essentials readiness review.
Prefer to speak to someone? Call 0300 883310 and we will talk through where you are, what is driving this, and what the most sensible next step looks like.
Certification may be the immediate requirement, but the readiness process can expose wider issues with how your IT is being managed.
Unsupported systems may need replacing. Device management or Microsoft 365 security may also need ongoing attention.
Mintivo can help address those issues through Managed IT Support, giving you ongoing technical support alongside your cyber security requirements. If you need a broader assessment of your infrastructure, a Risks & Recommendations Audit can provide a more detailed view of your IT environment and priorities.
Cyber Essentials certificates expire after 12 months, so certification should not become a once a year scramble.
Mintivo’s Cyber Essentials as a Service provides ongoing support to help keep the relevant controls in good shape between renewals. This can make it easier to spot gaps earlier and prepare for your next certification cycle.
Cyber Essentials is a UK government backed cyber security certification scheme. It focuses on fundamental technical controls that help protect organisations against common internet based cyber attacks.
Businesses can use certification to demonstrate to customers and other stakeholders that these controls are in place.
Cyber Essentials Plus uses the same technical requirements as Cyber Essentials but adds independent technical testing.
An assessor tests a sample of the systems within scope to verify that the required controls have been implemented effectively.
Not every tender requires Cyber Essentials.
Certain government contracts require suppliers to hold Cyber Essentials or Cyber Essentials Plus, or demonstrate equivalent controls. Private businesses and supplier frameworks can also set their own certification requirements.
Check the wording of the opportunity carefully. If Cyber Essentials is mentioned and you are unsure what is required, Mintivo can help you review it.
Timescales depend on how ready your business is when you start.
An organisation with the necessary controls already in place may be able to move through the process relatively quickly. Unsupported software or other technical gaps can create additional work before certification.
If you are working towards a customer or tender deadline, tell us at the start so readiness can be assessed against that timescale.
Unsupported software is a significant issue for Cyber Essentials. Other problems can include missing security updates, access control weaknesses and devices that are not being managed correctly.
A readiness check can help identify these issues before you submit your assessment.
Yes. You do not need to be certification ready before speaking to Mintivo.
The readiness process is designed to identify what needs attention first. We can then help you understand the changes required and support you in addressing relevant technical gaps.
Yes. Preparing for certification can highlight weaknesses in the way IT is currently managed.
If wider support is needed, Mintivo can help with managed IT, Microsoft technologies and broader cyber security requirements after the immediate certification work is complete.
It helps to know why certification is required and whether you have a deadline.
We will also need to understand the scope of your IT environment, including the people and systems that need to be covered. If a customer or tender has given you specific wording, send this to us as well.
Cyber Essentials can provide evidence that fundamental cyber security controls are in place, which can be useful when discussing cyber risk with an insurer.
Eligible UK organisations with turnover below £20 million can also opt into cyber liability insurance arranged through the Cyber Essentials scheme when the required certification conditions are met. Other insurers can set their own security requirements.
Cyber Essentials and Cyber Essentials Plus certifications expire after 12 months.
Regularly reviewing your security controls during the year can make renewal easier and help prevent changes to your IT environment creating unexpected compliance gaps.
Call us on
Find us at
Mintivo, 1 The Sidings, Lacock Green, Lacock, Chippenham, SN15 2NL
Mail us at
