Spend less time on manual work
Your device register and controls feed straight into the official IASME self-assessment, so you’re answering from evidence you already hold, not starting from scratch.
Meet every requirement for
Cyber Essentials with Assuric compliance software
Assuric gives you the scoping, controls and self-assessment to get Cyber Essentials certified, all in one place.
- Scoping with Cyber Essentials assessors
- Clear controls for your setup
- Self-assessment and certificate in one platform
- Cyber Essentials Plus audits
Trusted by security teams
Features
Everything you need for
Cyber Essentials
Expert hands-on support
Know exactly what's in scope
We help you understand which of your systems and devices are in-scope for the assessment, and get you ready for certification.
Audits, assurance & certification
From first draft to certificate
We take you through the self-assessment questionnaire and all the way to your Cyber Essentials certificate. Once certified, we can audit your setup for Cyber Essentials Plus.
Asset & device management
Every device tracked
Manage all of your devices and assets in one centralised system, with an owner on every asset. Built-in deadlines and notifications keep asset information up to date with the standards.
Automated compliance tracking
Clear controls for your size, product and team
Identify which security controls you need, and how to implement them. Guidance built around your setup, including device management and endpoint monitoring where it's needed.
Benefits
The difference Assuric makes
Build trust with buyers and partners
Show your Cyber Essentials certificate in your Trust Centre, alongside your other security evidence, when NHS buyers and partners ask how you protect their data.
Never miss a renewal
Renewal dates and milestones are tracked, with notifications sent before they’re due, so your certification never quietly lapses.
One platform as you grow
Cover Cyber Essentials alongside the DSPT, DTAC and ISO 27001, reusing evidence across frameworks instead of starting again.
Scale to Cyber Essentials Plus
When you’re ready, our assessment partners audit your setup for Cyber Essentials Plus, building on the evidence already in Assuric.
What our customers say
“We couldn't speak highly enough of both the Assuric team and the platform itself, which is incredibly easy to use, and with the skill and hardworking nature of the Assuric team. They've been a key component in accelerating our progress and deployments!”
Maks Kozarzewski
COO, VitVio
“The Assuric platform is a game changer in the clinical risk management field. It has been carefully designed to make the job of a CSO significantly more streamlined. The team are excellent and responsive to any product suggestions I have requested, and it has been a pleasure to work with them.”
Paul Llewellyn
CCIO, Accenture
“Assuric has been fantastic in helping us quickly and safely navigate regulatory compliance in the UK. From completing Cybersecurity requirements to DSPT, DCB0129, and DTAC, the team was supportive, extremely knowledgeable, and the platform made everything quick and straightforward. A separate regulatory company we consulted at the beginning even remarked on how quickly we achieved compliance!”
Katie Baker
Director UK & Ireland, Tandem
Frequently asked questions
Cyber Essentials is a UK government-backed certification scheme, run by IASME on behalf of the National Cyber Security Centre (NCSC), that helps organisations of any size protect themselves against the most common cyber attacks. Certification builds trust with your customers and is required for the NHS DTAC.
Cyber Essentials is based on a self-assessment questionnaire. Cyber Essentials Plus adds an independent technical audit, in which an assessor checks your controls are in place through vulnerability scans and testing of a sample of your devices. The audit must take place within three months of your Cyber Essentials certification. Cyber Essentials Plus is recommended for organisations that handle sensitive data or have a higher risk profile.
Because NHS buyers require it, and it protects you against the most common cyber attacks. Cyber Essentials is backed by the UK Government and covers five basic technical controls, so it’s also a quick way to build trust with customers and buyers. It’s required for the NHS DTAC, and can help evidence parts of your Data Security and Protection Toolkit (DSPT).
Cyber Essentials isn't a legal requirement, but it's recommended by the UK Government and required for some government contracts. It's also required for the NHS DTAC, and can help evidence parts of the NHS England Data Security and Protection Toolkit (DSPT). DTAC also requires an external penetration test from the last 12 months for products accessed over the internet, which we can provide.
Set your scope, put the five technical controls in place, then complete the Cyber Essentials self-assessment questionnaire, which an IASME-licensed certification body marks. Assessments started since 27 April 2026 use version 3.3 of the requirements: multi-factor authentication must be turned on for every cloud service that offers it, or you fail automatically. For Cyber Essentials Plus, an assessor then tests your systems, within three months of your Cyber Essentials certification.
To ensure ongoing compliance and protection against new or evolving threats, organisations must renew their certification annually.
Cyber Essentials covers five technical control areas: firewalls, secure configuration, security update management, user access control and malware protection. Your scope sets which devices, cloud services and networks those controls apply to.
Yes. Cyber Essentials is required for the NHS DTAC and can help evidence parts of the NHS DSPT. In Assuric, your Cyber Essentials work is mapped across, so the evidence you already hold also counts towards DSPT, DTAC and ISO 27001.
Assuric takes you from scoping to certificate in one place. We help you work out which systems and devices are in scope, show you the controls you need for your size and setup, and take you through the self-assessment questionnaire. Once you're certified, we arrange your Cyber Essentials Plus audit with our assessment partners, who carry out the testing and issue your certificate.
From scoping to certificate,
all in one place
See how Assuric and our assessors get you Cyber Essentials certified, and ready for Plus when you need it.