Skip to main content
Achieve the UK government-backed baseline for cyber hygiene.
Cyber Essentials is a UK government-backed certification scheme that helps organizations protect against the most common cyber attacks. It focuses on five technical control areas and is based on a self-assessment questionnaire verified by a certification body.
Cyber Essentials is often required to bid for certain UK government contracts and demonstrates a baseline of cyber hygiene to customers.

​
Who needs Cyber Essentials?

UK government suppliers

Often mandatory for contracts involving handling of certain government information.

SMEs

An accessible, affordable starting point for small and medium organizations.

​
Key components

Firewalls

Secure configuration of boundary and device firewalls.

Secure configuration

Harden devices and software by removing unnecessary functionality.

Access control

Restrict access to data and services to authorized users.

Malware protection

Protect against malware with anti-malware or allow-listing.

Security update management

Keep software and devices patched and up to date.

​
How DSALTA helps with Cyber Essentials

1

Activate Cyber Essentials

Select Cyber Essentials from the Frameworks page. DSALTA maps the five control areas.
2

Review the five controls

Review firewalls, configuration, access, malware, and patching controls.
3

Collect evidence automatically

Connect integrations to verify technical controls.
4

Complete the questionnaire

Answer the self-assessment with DSALTA’s guidance.
5

Submit for certification

Prepare your verified self-assessment for the certification body.

​
Frequently asked questions

Cyber Essentials is a verified self-assessment. Cyber Essentials Plus adds a hands-on technical audit by an assessor.
Certification is valid for 12 months and must be renewed annually.