Independently Tested Cyber Security Certification for Businesses That Need the Highest Level of Assurance

.

Cyber Essentials Plus Certification

Cyber Essentials Plus is the highest level of certification within the UK Government-backed Cyber Essentials scheme. It builds upon the standard Cyber Essentials certification by adding a rigorous programme of independent technical testing to verify that your cyber security controls are working effectively.

Unlike Cyber Essentials, which is based on a self-assessment questionnaire, Cyber Essentials Plus requires an accredited assessor to test your systems and devices against real-world attack scenarios.

At Soltech IT Ltd, we help businesses prepare for Cyber Essentials Plus by identifying potential weaknesses, implementing the required security controls and ensuring you are ready for independent assessment.

Whether you are looking to strengthen your cyber security, meet customer requirements or bid for government contracts, our experienced consultants will guide you through every stage of the certification process.

What is Cyber Essentials Plus?

Cyber Essentials Plus is an independently verified cyber security certification that provides greater assurance than the standard Cyber Essentials scheme.

To achieve certification, your organisation must first hold a valid Cyber Essentials certificate before undergoing technical verification by an accredited certification body.

During the assessment, qualified testers examine your systems to confirm that your cyber security controls are functioning correctly and are capable of defending against common cyber attacks.

This independent testing provides customers, suppliers and stakeholders with confidence that your organisation has implemented effective cyber security measures—not just documented them.

Why Choose Cyber Essentials Plus?

Cyber threats continue to evolve, with attackers increasingly targeting businesses through phishing emails, compromised passwords, unpatched software and vulnerable devices.

Cyber Essentials Plus demonstrates that your organisation has taken additional steps to protect its systems by successfully passing independent security testing.

Certification can help your business:

• Demonstrate a higher level of cyber security maturity
• Increase customer confidence
• Meet supplier and contractual requirements
• Strengthen your security posture
• Support cyber insurance applications
• Differentiate your business from competitors
• Reduce the likelihood of successful cyber attacks

For organisations handling sensitive information or operating in regulated sectors, Cyber Essentials Plus is becoming an increasingly valuable accreditation.

What's the Difference Between Cyber Essentials and Cyber Essentials Plus?

Although both certifications are based on the same five technical controls, the assessment process is significantly different.

Cyber Essentials Plus provides independent validation that your security measures work in practice—not just on paper.

What Does Cyber Essentials Plus Testing Include?

During the assessment, accredited testers will examine various aspects of your IT environment to ensure your security controls are functioning correctly.

Testing typically includes:

Device Security Testing

A sample of user devices, including desktops and laptops, are examined to verify they meet Cyber Essentials requirements.

Assessors confirm that:

• Security updates are installed
• Anti-malware protection is active
• User permissions are correctly configured
• Device security settings comply with the standard

Malware Protection Testing

Assessors verify that your endpoint protection can detect and prevent malicious software from executing.

This confirms that your anti-malware solution is actively protecting business devices against common threats.

Multi-Factor Authentication (MFA)

Where remote services and cloud platforms are used, assessors verify that Multi-Factor Authentication has been implemented correctly to protect user accounts.

Vulnerability Testing

Devices are checked for known security vulnerabilities, missing patches and insecure configurations that could allow attackers to gain access.

External Boundary Testing

Internet-facing systems are assessed to ensure they are securely configured and not exposing unnecessary services to the public internet.

User Account Security

Testing confirms that users do not have unnecessary administrator privileges and that privileged accounts are appropriately managed.

Our Cyber Essentials Plus Preparation Service

Preparing for Cyber Essentials Plus is often the difference between passing first time and failing the assessment.

Our consultants work closely with your organisation to identify potential issues before the independent audit takes place.

Our service includes:

• Cyber Essentials review
• Technical readiness assessment
• Gap analysis
• Security configuration review
• Vulnerability remediation
• Microsoft 365 security assessment
• Firewall review
• Endpoint security review
• User permission review
• Multi-Factor Authentication verification
• Certification preparation
• Liaison with the certification body
• Ongoing support throughout the assessment

By resolving issues before testing begins, we help minimise delays and improve your chances of achieving certification on your first attempt, which can save organisations thousands if not tens of thousands of pounds compared when compared to failing to achieve certification the first time around or on multiple ocassions.

Common Reasons Businesses Fail Cyber Essentials Plus

Many organisations underestimate the technical requirements of Cyber Essentials Plus.

Common issues include:

• Missing security updates
• Unsupported operating systems
• Weak administrator account controls
• Incomplete Multi-Factor Authentication
• Poor endpoint protection
• Insecure firewall configurations
• Devices not meeting compliance requirements
• Incorrect Microsoft 365 security settings

Our preparation service is designed to identify and resolve these issues before your formal assessment.

Who Should Consider Cyber Essentials Plus?

Cyber Essentials Plus is ideal for organisations that:

• Work with Government departments
• Bid for public sector contracts
• Handle sensitive customer information
• Process financial or confidential data
• Need to demonstrate enhanced cyber security
• Require independent verification of their security controls

It is particularly valuable for:

• Professional Services
• Financial Services
• Healthcare Providers
• Schools and Multi Academy Trusts
• IT Companies
• Legal Practices
• Manufacturers
• Engineering Companies
• Charities
• Construction Firms
  

The Benefits of Cyber Essentials Plus

Independent Verification

Your cyber security controls are independently tested, providing greater confidence for customers and stakeholders.

Enhanced Reputation

Certification demonstrates that your organisation has invested in protecting its systems and data against cyber threats.

Competitive Advantage

Many organisations view Cyber Essentials Plus as a differentiator when selecting suppliers.

Improved Security

Preparing for the assessment often leads to significant improvements in your overall cyber security posture.

Stronger Customer Trust

Customers increasingly expect suppliers to demonstrate independently verified cyber security standards.

Why Choose Soltech IT?

At Soltech IT, we understand that Cyber Essentials Plus is more than simply passing a certification—it is about strengthening your organisation's resilience against cyber threats.

Our experienced cyber security specialists provide:

• Comprehensive readiness assessments
• Practical remediation advice
• Microsoft 365 security expertise
• Endpoint protection reviews
• Firewall and network security assessments
• Vulnerability management
• Friendly, jargon-free guidance
• UK-based support throughout the certification process

Where appropriate, we can also integrate advanced security technologies such as Managed Detection and Response (MDR), Endpoint Detection and Response (EDR), Security Awareness Training and Vulnerability Management to further enhance your protection beyond the Cyber Essentials Plus baseline.

Frequently Asked Questions



Do we need Cyber Essentials before Cyber Essentials Plus?

Yes. A valid Cyber Essentials certification must be in place before your organisation can undertake the Cyber Essentials Plus assessment.

How long does Cyber Essentials Plus take?

The timeframe depends on the size and complexity of your organisation. Preparation may take several days or weeks, while the independent assessment is typically completed over one or two days.

Will all our devices be tested?

No. The assessor will usually select a representative sample of devices and systems to confirm compliance with the Cyber Essentials Plus requirements.

What happens if we don't pass?

If any issues are identified during testing, you'll receive feedback outlining the areas requiring improvement. Once the necessary remedial work has been completed, the relevant tests can be repeated in accordance with the certification body's procedures.

Ready to Achieve Cyber Essentials Plus?

Cyber Essentials Plus provides independent assurance that your cyber security controls are protecting your business against common cyber threats. It demonstrates a higher standard of security, strengthens customer confidence and helps your organisation meet increasingly demanding contractual and compliance requirements.

Whether you are upgrading from Cyber Essentials or preparing for your first Cyber Essentials Plus assessment, Soltech IT Ltd can help you achieve certification with confidence.

Contact Soltech IT today to arrange a Cyber Essentials Plus readiness assessment and discover how we can help your organisation achieve the highest level of Cyber Essentials certification.

Meet the team

Executive Director 

Working within the business and educational sectors for many years, Adam has been instrumental in harnessing the latest technology to innovate and deliver new and effective systems.

Prior to joining Soltech IT in 2011, Adam spent 12 years managing the IT systems and operations of Focus DIY's offices and stores throughout the United Kingdom.