01
Firewalls
Have internet-connected devices and network boundaries been configured to restrict unnecessary inbound access?
Personalised 5-control triage
Check your Cyber Essentials readiness — then get an action plan.
Answer five high-level questions. Your answers stay in your browser and are used to show likely gaps, evidence to gather and the most useful next step before certification.
5 technical controls~3 min to completePrivate no answers submitted
Readiness check0 of 5 answered
02
Secure configuration
Have default accounts/settings been addressed and unnecessary software or services reduced?
03
Security update management
Are supported operating systems and applications tracked and security updates deployed within current scheme requirements?
04
User access control
Are accounts limited to what people need, administrator rights controlled, and MFA used where required?
05
Malware protection
Is appropriate malware protection, application allow-listing or equivalent protection in place?
0/ 5
Your high-level result
Control-by-control
Your action plan
Use these prompts to prepare your official answers and supporting evidence.
Before certification
Five “yes” answers are not the end of readiness.
Cyber Essentials v3.3 starts with scope. Confirm what is in scope — including relevant cloud services — and make sure your official questionnaire answers match the environment that will actually be certified.
This tool is a high-level triage only. Use the current NCSC Cyber Essentials resources and Requirements for IT Infrastructure v3.3 for authoritative requirements.
Continue the decision