Firewalls
Restrict unnecessary access between your devices/networks and the internet.
Current scheme requirements
The five Cyber Essentials technical controls.
The current NCSC Requirements for IT Infrastructure are version 3.3, effective 27 April 2026. Use official documentation for detailed implementation rules.
Secure configuration
Reduce unnecessary functionality and insecure default configuration.
Security update management
Keep supported software and operating systems updated within the scheme requirements.
User access control
Give users only the access they need and protect privileged/cloud access appropriately.
Malware protection
Use approved protection methods to stop malicious code from running.
Authoritative source: download the current NCSC requirements and question set.