Skip to content

Buyer guide

How to choose a Cyber Essentials Certification Body

Updated 23 September 2026 · Plain-English UK guidance

All valid Certification Bodies operate within the same scheme, but the commercial experience differs. Start by confirming current status in IASME’s official directory.

Compare evidence, not marketing adjectives

  1. Status: verify current IASME listing.
  2. Scope: confirm CE, CE+ and any required support are actually included.
  3. Price: distinguish bare assessment, supported package and “from” price.
  4. Turnaround: ask what the stated SLA starts from.
  5. Feedback: understand what guidance is included if answers need correction.
  6. Re-test policy: clarify what additional testing costs.
  7. Delivery: check remote/on-site expectations for Plus.
  8. Evidence freshness: prefer information with a source and recent verification date.

This site does not sell an organic ranking position. Use the comparison table to shortlist providers based on your requirements.

Official references: NCSC Cyber Essentials overview and NCSC requirements/resources.

X