Original research
Cyber Essentials Requirements Change Monitor
Current Cyber Essentials requirements: v3.3
The NCSC lists v3.3 as the current requirements version, effective 27 April 2026. IASME's preparation material identifies the Danzell question set for purchases from that date.
Current NCSC requirements apply to applications registered from this date. Key areas include clearer cloud-service scoping, application-development wording, backup guidance positioning and access-control updates.
NCSC resources ↗IASME's public preparation page identifies Danzell as the question set to use when preparing to purchase from 27 April 2026.
IASME question-set preview ↗NCSC retains the previous version for applications that started before the v3.3 transition.
NCSC resources ↗This monitor explains public scheme changes; NCSC and IASME remain the authorities for the current requirements and assessment material.