What is a Cyber Essentials Certification Body?
IASME describes Certification Bodies as specially trained cyber-security companies that are licensed and assured to offer Cyber Essentials assessment and certification. Assessors work through a Certification Body rather than certifying organisations independently.
That distinction matters when comparing providers. You are not only comparing a logo or headline price; you are comparing how a licensed provider packages assessment, support, delivery and—where qualified—Cyber Essentials Plus technical auditing.
What should you compare?
- Scheme coverage: Cyber Essentials, Cyber Essentials Plus, or both.
- Published pricing evidence: whether a provider shows a clear price, range, package or “from” figure.
- Support model: self-led assessment versus additional implementation or remediation support.
- Delivery model: remote, on-site or hybrid where relevant.
- Evidence freshness: when provider information was last checked.
Does CZITAPP rank paid partners higher?
No. Commercial or referral relationships should be disclosed separately from organic comparison. A provider should not be able to buy a higher evidence position simply by paying for placement.